Sunday, 9 August 2015

Radius: Access-Accept

Access-Accept packet sent by Radius server to radius client, once all the credentials of user are verified. On reception of an Access-Accept, the Identifier field is matched with a pending Access-Request.  The Response Authenticator field must contain the correct response for the pending Access-Request. Invalid packets are silently discarded.


Following is the packet format for Access-Accept.

Code field
It is set to 2 for Access-Accept packet.

Identifier field
The Identifier field is a copy of the Identifier field of the Access-Request, which caused this Access-Accept.

Response Authenticator
Response authenticator value computed using following logic.

ResponseAuth=MD5(Code+ID+Length+RequestAuth+Attributes+Secret)

Attributes field
This file can contain a list of zero or more Attributes. Its size can vary in length.


Prevoius                                                 Next                                                 Home

No comments:

Post a Comment