Home > Glossary > CompTIA Security+ Certification Exam > RADIUS (Remote Authentication Dial-In User Service)

📖 What is RADIUS (Remote Authentication Dial-In User Service)?

Remote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for users who connect and use a network service. It is commonly used for VPNs and wireless network access.

🥋 Sensei Says:

"Remember that RADIUS only encrypts the password in the access-request packet, whereas TACACS+ encrypts the entire payload."

📚 Certification: CompTIA Security+ Certification Exam (SY0-701)

🔑 What are the Key Concepts of RADIUS (Remote Authentication Dial-In User Service)?

▸ Implements the AAA framework, providing a centralized method for Authentication, Authorization, and Accounting to track user access and activity across a network.
▸ Operates on a client-server model where network devices, like VPN gateways or wireless access points, act as clients forwarding requests to a central server.
▸ Utilizes UDP ports 1812 for authentication and authorization and port 1813 for accounting, prioritizing speed and efficiency over connection-oriented TCP.
▸ Relies on a pre-shared secret key between the client and server to authenticate communication and encrypt the user's password during the access-request process.
▸ Commonly deployed in WPA2/WPA3 Enterprise environments to replace shared passwords with individual user credentials, enhancing security and simplifying user offboarding.

🎯 How does RADIUS (Remote Authentication Dial-In User Service) appear on the SY0-701 Exam?

You may be asked to recommend a solution for a corporate wireless network that requires individual user authentication rather than a single shared password, leading you to select RADIUS for WPA Enterprise.

Expect questions comparing RADIUS and TACACS+; a scenario might describe a need for full packet encryption and granular command authorization for network admins, making TACACS+ the better choice.

❓ Frequently Asked Questions

Why is RADIUS preferred over local authentication on network devices?

Local authentication requires updating every device when a user's password changes or an employee leaves. RADIUS centralizes this process, allowing admins to manage access from one location for all connected devices.

Does RADIUS provide full encryption for all transmitted data?

No, RADIUS only encrypts the password field within the access-request packet. Other attributes are sent in cleartext, which is why TACACS+ is often preferred for high-security administrative device management.

Related Terms from CompTIA Security+ Certification Exam

Regular Expression (Regex) TACACS+ Extended Detection and Response (XDR) Man-in-the-Middle (MitM) Cryptographic Hash Perfect Forward Secrecy (PFS)

📝 Related Study Guides

Study Guide 9 min read

How to Pass CompTIA Security+ (SY0-701) on Your First Try

To pass CompTIA Security+ SY0-701 on your first try, build a structured 6-8 week study plan covering all five domains, prioritize understanding concepts over memorization, practice with scenario-based questions daily, and consistently score 85% or higher on practice exams before scheduling your test. Hands-on lab experience is essential for performance-based questions.

Deep Dive 8 min read

Zero Trust Architecture: Security+ (SY0-701) Deep Dive

Zero Trust architecture is a security framework based on the principle "never trust, always verify." Unlike traditional perimeter security, it assumes breaches are inevitable and requires strict identity verification for every person and device attempting to access resources, regardless of whether they are inside or outside the network perimeter.

Exam Tips 8 min read

Security+ PBQs: Master Firewall ACLs & Incident Response

Security+ Performance-Based Questions (PBQs) are scenario-driven simulations requiring you to apply knowledge to real-world tasks. To master them, focus on firewall ACL rule ordering, the "implicit deny" principle, and analyzing system logs for incident response. Consistent practice with high-fidelity simulations is the most effective way to ensure exam success.