topic Hi, in Network Access Control

Radius authentication question

sarahr202 — Mon, 11 Mar 2019 06:19:19 GMT

Hi everybody,

I am trying to learn Radius authentication . Here is my lab set up:

R1( 107.107.107.10)-------(107.107.107.4)-WIN2008(RADIUS SERVER)

Below is radius config on R1:

aaa authentication login default group radius local

radius-server host 107.107.107.4 auth-port 1645 acct-port 1646
radius-server key cisco

I have a few questions:

1) Above I do not specify any encryption on R1, what encryption will be used by R1 by default ?

In the attached file, we see password is encrypted but there is no config on R1 to use particular encryption

2) We also see " authenticator" which is I believe is R1 i.e host name encrypted with shared secret . Am I right?.

Much appreciated and have a great weekend!!

johnd2310 — Fri, 18 Dec 2015 05:58:06 GMT

Hi,

The Radius Protocol encrypts the user-password by default. i think Radius uses MD5.

The authenticator is a random string generated by the client and is used in the process of encrypting the password.

Thanks

John

Nadav — Fri, 18 Dec 2015 19:44:18 GMT

Take a look at:

http://www.untruth.org/~josh/security/radius/radius-auth.html

It'll answer both your questions fully.

sarahr202 — Sat, 19 Dec 2015 03:23:08 GMT

Thanks Hod for the excellent link

sarahr202 — Sat, 19 Dec 2015 03:23:35 GMT

Thanks John