Home » Interlink Networks Resource Library

Interlink Networks Resource Library

PRODUCT BRIEFS | WHITE PAPERS | APPLICATION NOTES | PRODUCT DOCUMENTATION

RAD-Series RADIUS Server

Product Briefs

RAD-Series RADIUS Server Version 7.3
This product brief provides a product overview and feature list on the RAD-Series RADIUS Server v7.3.

RAD-Series RADIUS Software Developer’s Toolkit
This product brief provides a product overview and functionality of the RADIUS Software Developer’s Toolkit.

RAD-Series RADIUS Server

White Papers

History of the AAA RADIUS Server and RADIUS Protocol
The story of how the RADIUS server and RADIUS protocol came into existence, became a de-facto standard, and eventually a recognized IETF standard. Starting from from dial in security needs at Merit Network, RADIUS weaved its way through the standards process, first as a de-facto standard for NAS equipment vendors, and then through the IETF standards body to become the internationally recognized standard for network authentication, authorization, and accounting.

Introduction to Diameter
The Diameter protocol was designed to overcome some of the earlier shortcomings of RADIUS and is being adopted by an ever expanding set of AAA requirements. This white paper provides an introduction to the Diameter protocol, advantages over RADIUS, and the applications targeted by Diameter.

Link Layer and Network Layer Security for Wireless Networks
Wireless networking presents a significant security challenge. There is an ongoing debate about where to address this challenge: at the link layer (via 802.1X and a RADIUS server) or network layer (via VPN). This paper looks at the basic risks inherent in wireless networking and explains both approaches, but concludes that link layer security provides a more compelling, complete solution and that network layer security serves well as an enhancement in applications where additional WLAN security is requested.

Wireless LAN Access Control and RADIUS Server Authentication
Wireless networking is emerging as a significant aspect of Internetworking. It presents a set of unique issues based on the fact that the only bounds for a wireless network is the radio signal strength. There is no wiring to define membership in a network. Wireless networking, more than any other networking technology, needs an Authentication and Access Control mechanism. This paper looks at the access authentication issues, the existing and proposed technologies, and scenarios for use of a RADIUS Server for Wi-Fi Authentication.

Introduction to the RADIUS Server and 802.1x for Wireless Networks
Many new WiFi access points are advertised as employing IEEE 802.1X for enhanced security. Trade articles about this new technology call it a “security protocol,” a “security feature,” a “security standard,” an “authentication method,” or a “user authentication protocol” and promise “enhanced security” and a “more secure environment.” These claims do not always provide an accurate picture of how 802.1X fits into WiFi security. Despite all the hype, 802.1X through a RADIUS server, if utilized properly, can indeed provide a WiFi network with a higher level of security.

RAD-Series RADIUS Server

Application Notes

EAP-SIM Authentication Using Interlink Networks RAD-Series RADIUS Server
This application note presents how Interlink Networks’ RADIUS Server can be deployed as a gateway between an IP network and an SS7 network resulting in a shared authentication service for both networks.

Configuring PEAP and TTLS in the Interlink Networks RAD-Series RADIUS Servers
This application note explains how to configure the Interlink Networks RADIUS Server to do TLS-protected authentication using PEAP or the EAP-TTLS authentication method. This application note only covers the configuration records in the server configuration files. These are text files and can be edited with a text editor. Use of the Interlink Server Manager for managing server configurations is covered in the Administrator’s Guide.

RAD-Series RADIUS Server and Cisco Wireless Deployment Guide
This document is intended to serve as a guideline to setup Interlink Networks RADIUS Server and Cisco Access Points (AP) to authenticate wireless local area network (WLAN) clients that use Cisco’s LEAP protocol. The scenarios covered in the document include LEAP/EAP authentication and MAC address authentication in separate VLANs configured on a dot1q AP. Accurately configuring the APs and the RADIUS server in each case is important. For non-dot1q configurations, the security related configuration remains the same while the “Radio to VLAN-mapping” configurations change.

Using the RAD-Series RADIUS Server Software with Microsoft Active Directory
This article describes how to configure Interlink Networks RADIUS server to authenticate users against a Microsoft Active Directory Server.

Using 802.1x for Wireless Local Area Networks with RAD-Series RADIUS Server Software
The IEEE 802.1x standard, Port Based Network Access Control, defines a mechanism for port-based network access control that makes use of the physical access characteristics of IEEE 802 LAN infrastructure. Many new 802.11 wireless LAN access points are advertised as employing IEEE 802.1x for enhanced security. Interlink Networks supports 802.1x in its RADIUS Server. This application note outlines the required steps to configure these products to authenticate WLAN users.

Enhancing Security and Service using RADIUS Server Dynamic Access Controls
This application note provides examples of how to implement dynamic policies using the AAA Server. Interlink Networks has made it possible to implement powerful dynamic access controls with the introduction of new attributes based on the system clock of the server. Dynamic policies are powerful tools for delivering value in various ways to customer and company alike.

RAD-Series RADIUS Server and RSA Security Two-Factor Authentication
This application note introduces the concept of two factor authentication and explains how the RAD-Series RADIUS Server integrates with RSA Security SecurID. Two-factor authentication provides a way to make the authentication of network users far more secure.