АМАТЕК AN-SGM28P24-400 Руководство по интерфейсу командной строки CLI онлайн [176/322] 598614

175 / 322

RADIUS is a protocol based on UDP, and RADIUS can encapsulate authentication

information and billing information. The early RADIUS authentication port is 1645, the current

use port 1812, the early RADIUS billing port is 1646, the current use port 1813。

Because RADIUS is hosted on UDP, RADIUS has a timeout retransmission mechanism. At

the same time, in order to improve the reliability of communication between authentication system

and RADIUS server, two RADIUS server schemes are adopted, that is to say, the standby server

mechanism is adopted。

The RADIUS message format is as follows. Code refers to the type of RADIUS protocol

message. Identifier index identifier for matching requests and responses. Length refers to the

length of the entire message (including the header). Authenticator is a 16 byte string, a random

number for the request packet, and a message digest for the response packet that is generated by

MD5. Attribute refers to the attributes in the RADIUS protocol package。

RADIUS message format

The network uses the following RADIUS protocol packages：

The Access-Request:Code value is 1, the authentication request packet is sent to the

authentication server from the authentication system, and the user name and password are

encapsulated on the package。

The Access-Accept:Code value is 2, from the authentication server to the response packet of

the authentication system, which means the user authentication is successful。

The Access-Reject:Code value is 3, and the authentication packet is sent to the authentication

system from the authentication server, which indicates the failure of user authentication。

The Access-Challenge:Code value is 11, from the authentication server to the response

packet of the authentication system, which indicates that the authentication server needs further

information of the user, such as passwords。

The Accounting-Request:Code value is 4, and the billing request package from the

authentication system is sent to the authentication server, including the start billing and the end

billing package, and the billing information is encapsulated on the package。

The Accounting-Response:Code value is 5, from the authentication server to the billing