All Radius clients & servers operate
using the following logic:
The Radius client issues an authentication-request to the Radius Server
The Radius Server receives the authentication-request and checks:
Do the encryption keys match? Does the username exist in the authentication
database? Do all the attributes conform to what's required to access
this system?
If the answer is negative to any of the above, an access-rejected
is returned to the client and the authentication process ceases or
the client retries (go back to step #1).
The Radius client receives an access-granted at this point.
The Radius client can (optionally) send an accounting-start packet.
The Radius server sends an acknowledgment.
The Radius client can (optionally) send an accounting-stop packet
on user disconnect.
The Radius server sends an acknowledgment.
VOP COM therefore, consists of the following processes:
Radius Authentication: In order to authenticate a user in
your application using a Radius Server, you need to create a request
instance, send the request to the proper server and then finally,
close/free the request.
Radius Accounting: After a positive reply is received, you
can create and send accounting packets from your application. To
do so, you use VOP COM to create a request instance, set the accounting
options, send the request to the proper Server and then close/free
the request on disconnect.
Key Product Features
The VOP COM Radius Client allows for the creation of customizable
Radius Requests that can be sent to an Radius Server for users
trying to gain access to a remote service.
You will also be capable of viewing the results for different
Radius Requests (Access Granted/Rejected).
VOP COM's functionality is identical to that of a NAS (Network
Access Server also know as a Terminal Server) when querying a Radius
server. For all intent and purpose, VOP COM looks like a dial-up
user device.
VOP COM's features are based on the Radius attributes used when
creating and sending a request. These attributes can be broken down
into two categories, Access Requests and Accounting Requests.
You can add any Radius attributes to your requests, and get any
Radius attributes from server replies. Example: you could retrieve
the session time limit for a user accessing a secured software application.
All of these requests include customizable values for various attributes.
They also contain configurable options for the Secret, Radius Server
IP Address and Radius Server Port number.
|