RADIUS and the Captive Portal: How Portal, NAS and AAA Hand Off a Session
Learn when to use NAS-initiated login or CoA in a RADIUS captive portal, which attributes carry the session, how accounting works, and why CoA logins stall.
Learn when to use NAS-initiated login or CoA in a RADIUS captive portal, which attributes carry the session, how accounting works, and why CoA logins stall.
See how Alepo AAA Server helps operators handle peak authentication loads, failover events, and reconnect storms with carrier-grade scalability and resilience.
Learn guest Wi-Fi best practices for captive portals, AAA, vouchers, quotas, consent and returning users while reducing access issues and revenue leakage.
AAA emergency mode keeps subscribers online when the database is down. Compare fail-closed, cached and fail-open policies, accounting buffering, and testing.
What to look for in captive portal software: 14 checks on payments, RADIUS and CoA, multi-venue tenancy, consent and carrier scale, each with a demo question.
A practical RADIUS attribute reference: NAS-Port-Type, Framed-IP-Address, Class, vendor-specific attributes, and how to map VSAs during a migration.
Is RADIUS secure? Learn what shared secrets protect, what remains exposed, how BlastRADIUS works, and 7 practical steps to harden RADIUS security.
Learn how EAP-TLS authentication works with RADIUS and 802.1X. Explore certificate-based mutual authentication, EAP-TLS vs. PEAP, and certificate lifecycle management.
Learn what TACACS+ is, how it works, TACACS+ vs RADIUS, command authorization, security, and TACACS+ over TLS with RFC 9887.
Learn how to secure guest and contractor network access with AAA, identity-based authentication, segmentation, time-bound access, and audit-ready logs.