Client/Server Model

A NAS router running the RADIUS client service passes user information to defined RADIUS server(s), and then acts, based on the response received. The RADIUS server responds to all user connection requests, authenticating the user, and then forwarding all configuration information needed for the client to provide the service to the user. RADIUS servers can act as proxy clients for other types of authentication servers. The RADIUS server, after reviewing the credentials, replies to the client with one of the following responses:

• Accept The user is authenticated.

• Reject The user is not authenticated and access is denied. The user will be prompted to reenter the user name/password.

• Challenge A request for more information from the user to confirm identity.

• Change Password The user must change their password.