📖 What is RADIUS?
Remote Authentication Dial-In User Service (RADIUS) is a network protocol providing centralized AAA services. It authenticates users attempting network access against a database, authorizing access levels, and tracking usage for accounting purposes. RADIUS commonly secures wireless and VPN connections.
"RADIUS utilizes UDP ports 1812 and 1813. A frequent exam distraction involves confusing RADIUS with TACACS+. Focus on RADIUS’s shared secret authentication and its broader vendor support compared to TACACS+’s Cisco origins."
📚 Certification: CompTIA Network+ Certification Exam (N10-009)
🔑 What are the Key Concepts of RADIUS?
- ▸ RADIUS uses a client-server model: the network access server (NAS) requests authentication, and the RADIUS server validates credentials.
- ▸ Authentication, authorization, and accounting (AAA) are core functions; RADIUS provides a centralized point for managing network access control.
- ▸ RADIUS utilizes a shared secret for authentication between the NAS and the RADIUS server, making it vulnerable if the secret is compromised.
- ▸ UDP ports 1812 (authentication) and 1813 (accounting) are essential to remember for exam questions and troubleshooting scenarios.
- ▸ RADIUS supports various authentication methods, including PAP, CHAP, and MS-CHAP, impacting security and compatibility.
🎯 How does RADIUS appear on the N10-009 Exam?
You may be asked to identify the protocol used when a wireless access point forwards user credentials to a central server for verification before granting network access.
A scenario might describe a network administrator needing to track user internet usage for billing purposes – determine which protocol facilitates this accounting function.
Expect questions about troubleshooting authentication failures, including verifying the shared secret and ensuring proper port configuration on the NAS and RADIUS server.
❓ Frequently Asked Questions
What’s the difference between RADIUS and TACACS+ and why does it matter for the exam?
TACACS+ uses a more secure, per-user encryption and separate authentication/authorization protocols. RADIUS uses a shared secret and combines these. The exam often tests your ability to differentiate their security models and vendor lock-in.
If RADIUS authentication fails, what are the first troubleshooting steps I should take?
Verify the shared secret matches on both the NAS and RADIUS server. Check network connectivity (ping) between the devices. Confirm UDP ports 1812/1813 are open and not blocked by a firewall.
Can RADIUS be used with VPNs, and if so, how?
Yes, RADIUS is commonly used to authenticate VPN users. The VPN concentrator acts as the NAS, forwarding user credentials to the RADIUS server for verification before establishing the VPN tunnel.