RADIUS
A network device hands a login to a central server and gets back accept, reject or challenge plus session attributes, with accounting to match. Asked because it gates Wi-Fi, VPN and switch ports.
on this pageshowhide
explore
- Roles and Proxying5 questions
- Packet Types and Flow5 questions
- Attribute-Value Pairs6 questions
- EAP Encapsulation4 questions
- Dynamic Authorization4 questions
- Accounting5 questions
- Security and Shared Secrets5 questions
questions
page 2 of 2What does Acct-Delay-Time (41) on a retried RADIUS Accounting-Request correct for, and what must change alongside it?
basics
~20 sAcct-Delay-Time (41) reports how many seconds the access device has been trying to deliver this record, so the server can subtract it from arrival time to recover the approximate event time. Updating it changes the packet's content, so the Identifier must change too.
In a tagged RADIUS attribute such as Tunnel-Private-Group-ID (81), how does a receiver tell a Tag from the value?
basics
~20 sTagged tunnel attributes reserve the value's first octet as a Tag grouping attributes that describe the same tunnel. In a text value an octet of 0x01 to 0x1F is read as the Tag; anything larger is the first character of the text.
Why must a CoA-Request carrying Service-Type 'Authorize Only' include a State attribute, and what does the access device do next?
basics
~20 sAuthorize Only tells the access device not to apply the pushed attributes but to fetch fresh authorization itself. It answers CoA-NAK with Error-Cause 507 Request Initiated, then sends an Access-Request carrying the State attribute, which ties that pull to the CoA-Request that asked for it.
Why should a RADIUS server answer a duplicate Access-Request from a cache instead of authenticating it again?
basics
~20 sBecause a duplicate is a retransmission of a request already answered, and authentication is not repeatable: a one-time credential is consumed, a challenge conversation advances twice, and back-end work doubles exactly when the server is already struggling.
showing 31–34 of 34