Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation  Back up to About Overview 
  
[+] Expand All
[-] Collapse All

Proxy RADIUS

The Steel-Belted Radius Carrier server can forward a RADIUS request to another server for processing and relay the other server’s result back to its client. In such cases, Steel-Belted Radius Carrier is acting as a proxy for the target server, and Steel-Belted Radius Carrier is proxy-forwarding the request to the target server.

Steel-Belted Radius Carrier supports proxy RADIUS; any Steel-Belted Radius Carrier server can act as proxy or target for authentication or accounting messages.

Proxy RADIUS Authentication

RADIUS authentication messages are forwarded by proxy as follows:

  1. An access client requests authentication from a RADIUS client, which sends an authentication request to a RADIUS proxy server.
  2. The proxy RADIUS server forwards the message to a RADIUS target server.
  3. The target RADIUS server performs the authentication services indicated by the message, then returns a response message to the proxy RADIUS server.
  4. The proxy RADIUS server relays the acknowledgement response message to the RADIUS client.

    Figure 17: RADIUS Proxy Forwarding

    RADIUS Proxy Forwarding

Proxy RADIUS Accounting

RADIUS accounting messages are proxyforwarded as follows:

  1. A RADIUS server receives an accounting request.
  2. Depending on its configuration, the RADIUS proxy server forwards the accounting message to a target accounting server or records accounting attributes locally (or does both).
  3. If the proxy server does not receive an acknowledgement of the forwarded accounting message, it re-sends periodically according to its retry policy.
  4. When the target server acknowledges the request, the proxy server forwards an acknowledgement to the RADIUS client.

Modified: 2017-09-27