Home > Glossary > CompTIA Security+ Certification Exam > Remote Authentication Dial-In User Service (RADIUS)

📖 What is Remote Authentication Dial-In User Service (RADIUS)?

Remote Authentication Dial-In User Service (RADIUS) is a networking protocol that provides centralized Authentication, Authorization, and Accounting (AAA) management for users who connect to a network service. It is commonly used for VPN and wireless access.

🥋 Sensei Says:

"Remember that RADIUS only encrypts the password in the access-request packet, not the entire packet, which is a key vulnerability compared to TACACS+."

📚 Certification: CompTIA Security+ Certification Exam (SY0-701)

🔑 What are the Key Concepts of Remote Authentication Dial-In User Service (RADIUS)?

▸ Implements the AAA framework, providing a centralized method for Authentication, Authorization, and Accounting to manage network access and track user activity.
▸ Utilizes a client-server model where network devices, like VPN gateways, act as clients that forward credentials to a central authentication server.
▸ Operates primarily over UDP ports 1812 and 1813, offering a lightweight transport mechanism for authentication and accounting data across the network.
▸ Relies on a shared secret key between the client and server to verify the identity of the network device requesting authentication.
▸ Only encrypts the user's password within the access-request packet, leaving other packet headers and attributes in plaintext, which is a known security limitation.

🎯 How does Remote Authentication Dial-In User Service (RADIUS) appear on the SY0-701 Exam?

You may be asked to identify the best protocol for implementing WPA2-Enterprise wireless security, where users must authenticate against a central database rather than a pre-shared key.

A scenario might describe a need for centralized auditing of user session durations and data usage on a VPN, requiring you to select the 'Accounting' feature of RADIUS.

Expect questions comparing RADIUS and TACACS+, specifically asking which protocol encrypts only the password versus the one that encrypts the entire packet for higher security.

❓ Frequently Asked Questions

What is the main difference between RADIUS and TACACS+ regarding security?

RADIUS only encrypts the password in the authentication packet, whereas TACACS+ encrypts the entire payload. Additionally, TACACS+ separates authentication, authorization, and accounting into distinct processes, while RADIUS combines authentication and authorization.

Why is RADIUS preferred over local authentication for large enterprises?

Local authentication requires managing user accounts on every individual network device. RADIUS allows administrators to manage all users in one central database, simplifying password changes and account revocations across the entire infrastructure.

Related Terms from CompTIA Security+ Certification Exam

Cryptographic Nonce Red Team Mandatory Access Control (MAC) Terminal Access Controller Access-Control System Plus (TACACS+) Cryptography Principle of Least Functionality

📝 Related Study Guides

Study Guide 9 min read

How to Pass CompTIA Security+ (SY0-701) on Your First Try

To pass CompTIA Security+ SY0-701 on your first try, build a structured 6-8 week study plan covering all five domains, prioritize understanding concepts over memorization, practice with scenario-based questions daily, and consistently score 85% or higher on practice exams before scheduling your test. Hands-on lab experience is essential for performance-based questions.

Deep Dive 8 min read

Zero Trust Architecture: Security+ (SY0-701) Deep Dive

Zero Trust architecture is a security framework based on the principle "never trust, always verify." Unlike traditional perimeter security, it assumes breaches are inevitable and requires strict identity verification for every person and device attempting to access resources, regardless of whether they are inside or outside the network perimeter.

Exam Tips 8 min read

Security+ PBQs: Master Firewall ACLs & Incident Response

Security+ Performance-Based Questions (PBQs) are scenario-driven simulations requiring you to apply knowledge to real-world tasks. To master them, focus on firewall ACL rule ordering, the "implicit deny" principle, and analyzing system logs for incident response. Consistent practice with high-fidelity simulations is the most effective way to ensure exam success.