Comptia-Network+: Network Access Control - RADIUS
RADIUS (Remote Authentication Dial-In User Service)
RADIUS is a client-server protocol that is used in network access control. It is important for managing authentication, authorization and accounting (AAA) on a network. Providing a centralized way of authenticating users, it greatly enhances network security.
How it works:
RADIUS works by having the network access server (NAS) send user information to a designated RADIUS server, which then checks that information against its own database to confirm or reject the access request.
Exam Tips: Answering Questions on RADIUS
1. Remember that RADIUS is a protocol that works by sending user information for authentication over the network. It is a client-server model and is used for authentication, authorization and accounting (AAA).
2. Be familiar with the key terms like NAS and AAA.
3. Understand that RADIUS provides a centralized method of authentication which increases network security.
4. Familiarize yourself with the port numbers commonly used by RADIUS: UDP 1812 for authentication and authorization, and UDP 1813 for accounting.
5. Practice scenario-based questions on RADIUS setup and troubleshooting, as these will help you to understand the application of the concept.
6. It's essential to understand that although RADIUS provides significant security benefits, it sends the user's password over the network in an encrypted form (not a clear text), so it still has potential security vulnerabilities when compared to some other protocols.
By keeping these points in mind, you should be better prepared to answer questions regarding RADIUS in your exam.