Network access server

A Network Access Server, or NAS, is a single point of access to a remote resource.

= Overview =

The NAS is meant to act as a Gateway_(telecommunications) to guard access to a protected resource. This can be anything from a telephone Telecommunications_network, to computer_printer, to even the Internet.

The process is as follows...

The Client_(computing) connects to the NAS. The NAS then connects to another resource asking whether the clients supplied credentials are valid. Based on that answer the NAS then allows or disallows access to the protected resource.

It is important to keep in mind the NAS contains no information about what clients can connect and which can not or what credentials are valid and which are not. All the NAS does is send the credentials the client supplied to a resource which does know how to process the credentials then (based on its answer), allows or disallows access.

= Examples =

The above translates into different implementations for different uses. Here are some examples.

*The most common use would be for access to the Internet. A user opens their web_browser. The NAS detects that the user is not currently authorized to have access to the Internet, so the NAS prompts the user for their username and password. The user supplies them and sends them back to the NAS. The NAS then uses RADIUS to connect to an AAA_protocol server (in this case, it is running FreeRADIUS) and passes off the username and password to the FreeRADIUS server. The FreeRADIUS server searches through it s resources and finds that the credentials are valid and notifies the NAS they are valid. The NAS then grants the user access to the internet.

*Another use of a NAS would be in VoIP. However, instead of using a username and password, many times a phone number or IP Address are used. If the phone number is a valid customer then the call can be completed. Other uses might be if the phone number has long distance access or is a telephone card and has minutes left.

= Associated Protocols =

Although not required, NAS are almost exclusively used with AAA servers. Of the AAA protocols available, RADIUS tends to be the most widely used.