RADIUS协议的原理及应用 目 录 培训目标 .............................................................................................................................................................. 2 前言 ...................................................................................................................................................................... 2 1 RADIUS协议介绍 ............................................................................................................................................. 2 2 RADIUS协议报文结构 ..................................................................................................................................... 3 2.1 Radius协议报文格式 .......................................................................................................................... 3 2.2 Code域 ................................................................................................................................................. 3 2.3 Identifier域 ..................................................................................................................................... 4 2.4 Length域 ............................................................................................................................................. 4 2.5 Authenticator .................................................................................................................................... 4 2.6 Attributes域 ..................................................................................................................................... 5 2.6.1 Type域 ..................................................................................................................................... 5 2.6.2 Length域.................................................................................................................................. 5 2.6.3 Value域 ................................................................................................................................... 6 2.6.4常用属性类型列表............................................................................................................................ 6 3 NAS设备RADIUS部分配置举例 ...................................................................................................................... 8 4 RADIUS系统下用户认证过程 .......................................................................................................................... 9 4.1 报文1：EAPOL-Start .......................................................................................................................... 9 4.2 报文2：EAP-Request/Identity ...................................................................................................... 10 4.3 报文3：EAP-Response/Identity .................................................................................................... 10 4.4 报文4：RADIUS Access-Request .................................................................................................... 11 4.5 报文5：RADIUS Access-Challenge ................................................................................................ 12 4.6 报文6：EAP-Request/MD5-Challenge ............................................................................................ 13 4.7 报文7：EAP-Response/MD5-Challenge .......................................................................................... 14 4.8 报文8：RADIUS Access-Request .................................................................................................... 14 4.9 报文9：RADIUS Access-Accept ...................................................................................................... 15 4.10 报文10：EAP-Success .................................................................................................................... 16 4.11 报文11：RADIUS Accounting-Request ........................................................................................ 17 4.12 报文12：RADIUS Accounting-Response ...................................................................................... 18 4.13 报文13：EAPOL-Logoff .................................................................................................................. 18 4.14 报文14：RADIUS Accounting-Request ........................................................................................ 19 4.15 报文15：RADIUS Accounting-Response ...................................................................................... 20 4.16 报文16：EAP-Failure .................................................................................................................... 21