3Com 4500 PWR 26-Port Configuration Manual page 380

RADIUS client an authentication response (Access-Accept), which contains the user's
authorization information. If the authentication fails, the server returns an Access-Reject response.
5) The RADIUS client accepts or denies the user depending on the
accepts the user, the RADIUS client sends a start-accounting request (Accounting
the Status-Type attribute value = start) to the R
6) The RADIUS server returns a start-accounting response (Accounting-Response).
7) The user starts to access network resources.
8) The RADIUS client sends a stop-accounting request (Accounting-Request, with t
attribute value = stop) to the RADIUS server
9) The RADIUS server return
10) The access to network
RADIUS message form
RADIUS messages are transported over UDP, which does not guarantee reliable delivery of messages
between RA DIUS server and client. As a remedy, RADIUS adopts the following mechanisms: timer
management, retransmission, and
messages.
Figure 32-3 RADIUS message format
1) The Code field (one byte) decides the type of RADIUS message, a
Table 32-1 De scription on the major v
Code Message type
1 Access-Request
2 Access-Accept
3 Access-Reject
s a stop-accounting response (Accounting-Response).
resources is ended.
at
backup server.
alues of the Code field
Direction: client->server.
The client transmits this message to the server to determine if t
user can access the network.
This message carries user information. It must contai
User-Name attribute and m
NAS-IP-Address, User-Password and NAS-Port.
Direction: server->client.
The server transmits this message to the clie
values carried in the Acce
(that is, the user passes the authentication).
Direction: server->client.
The server transmits this message to the clie
value carried in the Access-Request message is unacceptable
(that is, the user fails the authentication).
32-4
received authentication result. If it
ADIUS server.
.
Figure 32-3 depicts the format of RADIUS
s shown in
Message description
ay contain the following attributes:
ss-Request message are acceptable
-Request, with
he Status-Type
Table 32-1 .
he
n the
nt if all the attribute
nt if any attribute