RADIUS Accounting

When user authentication via RADIUS is applied to the network, user authentication can be automatically performed through RADIUS ACCOUNT packets provided by RADIUS clients such as AP (Access Point). The Policy Server receives external RADIUS ACCOUNT packets, stores them as audit logs, and uses them as substitute user authentication information.

When a NAS (Network Access Server) grants network access to a user, an accounting start (RADIUS Account Request packet with "start" as the value of the Acct-Status-Type attribute) is sent from the NAS to the RADIUS server to notify the start of the user's network access.

The "start" record generally includes the user's identification, network address, access location, and a unique session identifier.

Periodically, interim update records (RADIUS Account Request packets with "interim-update" as the value of the Acct-Status-Type attribute) are sent by the NAS to the RADIUS server to update the status of active sessions.

"Interim" records generally convey information about the duration of the current session and current data usage.

Finally, when a user's network access ends, the NAS sends an Accounting Stop record to the RADIUS server, providing information about final usage, packet transmission volume, data transfer volume, disconnection reason, and other information.

Generally, clients periodically send Accounting-Request packets until they receive an Accounting-Response acknowledgment.

Note

Alternative authentication is an authentication method where authentication performed by an authentication server other than NAC is used as a substitute for authentication in NAC.

RADIUS Alternative Authentication Settings

  1. Go to Preferences in the top menu.
  2. In the left settings menu, go to Service > RADIUS Server.

Configure Accounting Server settings below:

  1. Port Number : Set the RADIUS Accounting reception port. (Default: 1813)
  2. Single Sign-On : Set whether to perform authentication replacement upon RADIUS Accounting reception. (On/Off)
  3. Click the Update button.