Abstract: RADIUS is an authentication, authorization and accounting protocol being widely used in network environments. However, it is subject to attack for its flaw in design and poor implementation . This essay makes an analysis of the security vulnerability of RADIUS protocol and puts forward some way to solve these problems.

摘要： RADIUS是一个在网络环境下被广泛使用的认证、授权、记账 (AAA) 协议。然而，RADIUS协议本身设计的缺陷以及对它的粗糙实现都使得它易于受到攻击。文章 对 RADIUS 协议的安全隐患进行了分析，并提出了解决这些问题的方法。

关键词: RADIUS, AAA, 安全性, IPSec

CLC Number: 

• TN915.08