pana-5----Page:5
1  2  3  4  5  6  7  8  9  10  11 

PANA Single Authentication
PaC NAS RADIUS
Server
a) < Discovery and handshake phase>
| | |
< Authentication Authorization phase>
|PANA-Auth-Request(x) | |
b) |<---------------------| |
|PANA-Auth-Answer(x) | |
c) |--------------------->| |
| |RADIUS Access-Request |
d) | |----------------------->|
| |RADIUS Challenge |
e) | |<-----------------------|
|PANA-Auth-Request(x+1)| |
f) |<---------------------|........................|
|PANA-Auth-Answer(x+1) | |
g) |--------------------->|........................|
| | RADIUS Access-Request |
h) | |----------------------->|
| | RADIUS Access-Accept |
i) | |<-----------------------|
|PANA-Bind-Request | |
j) |<---------------------| |
|PANA-Bind-Answer | |
k) |--------------------->| |
| |RADIUS Accounting(Start)|
l) | |----------------------->|
| | |
< PANA access phase >


Triggered by EAP exchange
RADIUS messages are typically routed using NAI in user-name.
EAP is carried in EAP-Message attribute(s)
Session starts is signled by Accounting Start

PPT Version