Difference between revisions of "NAS"

(새 문서: NAS는 network access server의 약자이며 802.1x / RADIUS 인증 환경에서 RADIUS 서버에 인증 요청을 하고 그 결과에 따라 클라이언트의 네트워크 접속...)
 
 
(2 intermediate revisions by the same user not shown)
Line 1: Line 1:
NAS는 network access server의 약자이며 802.1x / RADIUS 인증 환경에서 RADIUS 서버에 인증 요청을 하고 그 결과에 따라 클라이언트의 네트워크 접속을 제한/허용한는 장비를 의미합니다.
+
A network access server (NAS) is a single point of access to a remote resource.
무선랜 환경에서는 AP(Access Point) 혹은 AP Controller가 이 역할을 할 수 있으며 유선랜 환경에서는 L2 스위치가 NAS에 해당됩니다.
+
 
NAS는 클라이언트(supplicant)의 인증 요청을 RADIUS 서버에 전송해 Access-Accept 혹은 Access-Reject인지에 따라 클라이언트의 통신을 제한 할 수 있습니다.
+
A NAS concentrates dial-in and dial-out user communications. An access server may have a mixture of analog and digital interfaces and support hundreds of simultaneous users. A NAS consists of a communications processor that connects asynchronous devices to a LAN or WAN through network and terminal emulation software. It performs both synchronous and asynchronous routing of supported protocols.
802.1x에서는 authenticator(pass-through)라고 표현합니다.
+
 
 +
The NAS is meant to act as a gateway to guard access to a protected resource. This can be anything from a telephone network, to printers, to the Internet. A client connects to the NAS. The NAS then connects to another resource asking whether the client's supplied credentials are valid. Based on that answer the NAS then allows or disallows access to the protected resource.
 +
 
 +
NASs are almost exclusively used with authentication, authorization, and accounting (AAA) servers. Of the AAA protocols available, RADIUS tends to be the most widely used.
 +
 
 +
Every time a user tries to obtain network access, that request is made to a Network Access Server or NAS. These NASes are commonly located at an ISP, and provide dial-up access or broadband services. The NAS may also be a wireless Access Point (AP), at an Internet cafe or airport.<br>
 +
The role of the NAS is to act as the gateway between the user and the RADIUS server.<ref>http://deployingradius.com/book/concepts/nas.html</ref>
  
 
[[File:Drawing_Roaming_RADIUS.png|400px]]<ref>https://en.wikipedia.org/wiki/RADIUS</ref>
 
[[File:Drawing_Roaming_RADIUS.png|400px]]<ref>https://en.wikipedia.org/wiki/RADIUS</ref>

Latest revision as of 10:44, 6 April 2021

A network access server (NAS) is a single point of access to a remote resource.

A NAS concentrates dial-in and dial-out user communications. An access server may have a mixture of analog and digital interfaces and support hundreds of simultaneous users. A NAS consists of a communications processor that connects asynchronous devices to a LAN or WAN through network and terminal emulation software. It performs both synchronous and asynchronous routing of supported protocols.

The NAS is meant to act as a gateway to guard access to a protected resource. This can be anything from a telephone network, to printers, to the Internet. A client connects to the NAS. The NAS then connects to another resource asking whether the client's supplied credentials are valid. Based on that answer the NAS then allows or disallows access to the protected resource.

NASs are almost exclusively used with authentication, authorization, and accounting (AAA) servers. Of the AAA protocols available, RADIUS tends to be the most widely used.

Every time a user tries to obtain network access, that request is made to a Network Access Server or NAS. These NASes are commonly located at an ISP, and provide dial-up access or broadband services. The NAS may also be a wireless Access Point (AP), at an Internet cafe or airport.
The role of the NAS is to act as the gateway between the user and the RADIUS server.[1]

Drawing Roaming RADIUS.png[2]