The Design And Implementation Of EAP Authentication Subsystem In Radius Server

Now the Internet is a highly commercial network, and how to effectively, reliably, and securely protect network resources and the interest of users must be addressed for all network operators. AAA means Authentication, Authorization and Accounting.It is a computer security services which can provide a platform to manage user effectively for network operators.The platform can provide three security functions which are authentication, authorization and accounting. At this time, the Radius protocol is a standard protocol to provide AAA services. So, it is ideal for network operators to choose a safe, efficient and easily maintained Radius server. At present, there are many open source Radius servers in network, but they lack in commercial applications. Especially in telecommunication applications, the lack of customized service and easily extended authentication method are main defects for those open source Radius servers.Based on the above background, the paper designs and implements EAP authentication subsystem in the Radius server which provides basic AAA services for network operators.EAP authentication subsystem is easy to extend authentication methods and meet the demand of customers for different authentication methods.I designed and implemented the EAP authentication subsystem which supports six EAP authentication methods which are EAP-MD5, EAP-MSCHAP2, EAP-LEAP, EAP-TLS, EAP-TTLS, EAP-PEAP and provides authentication methods scalability. The subsystem is divided into four main modules which are threading module, EAP authentication session management module, EAP authentication methods module and common module.At first, this thesis describes the project background, the analysis of the current research status of the Radius server, and outlines the main work and related technologies, and then present the Radius server EAP authentication subsystem requirement analysis, design and implementation details elaboration.