| |
Home > Products > NanoRADIUS
Features
Benefits
Architecture
Remote Authentication Dial In User Server (RADIUS) is an AAA (authentication, authorization and accounting) protocol. It can be used for network access or mobility applications, working in both local and roaming situations. The RADIUS client implements a client/server mechanism that enables remote access servers to communicate with a central server to authenticate users and authorize their access to the requested system or service. RADIUS is often used in embedded devices because it eliminates the need to store detailed user information locally on a device.
Unfortunately, most RADIUS packages are developed for PCs, not devices. This means that those RADIUS implementations can be difficult to fit into memory-constrained device environments... and typical RADIUS clients can degrade embedded device performance to an unacceptable degree.
NanoRADIUS(tm) is the answer.
NanoRADIUS is Mocana's easy-to-use, feature-rich RADIUS client specifically designed to speed product development while providing best-in-class device security services for resource-constrained environments.
NanoRADIUS Features
NanoRADIUS is an open, standards-based, full-featured, RFC-compliant and portable solution that enables you to securely authenticate users against any RADIUS server.
NanoRADIUS provides:
- Unlimited pending requests (instead of the standard limit of 256)
- Complete control over RADIUS server failover, including standby and round-robin configurations
- Support for multiple virtual instances
- Highly scalable
- Easy-to-use API implementation
Ultra-Small Size
Optimized for size and memory usage, NanoRADIUS has been specifically designed and coded to operate on resource-constrained devices, requiring as little as 27{ }KB code for Linux PPC machines.
Full (not partial) IETF RFC Compliance
- RFC-1994, PPP Challenge Handshake Authentication Protocol (CHAP)
- RFC-2865, Remote Authentication Dial In User Service (RADIUS)
- RFC-2866, RADIUS Accounting
- RFC-3576, Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS)
Authentication Support
- PAP
- CHAP
- Multiple Challenge-Response Authentication{emdash}ideal for SSH keyboard interactive authentication or token ID-based authentication.
NanoRADIUS Benefits
Works Where Others Won't
NanoRADIUS fits into the memory nooks and crannies where other RADIUS implementations cannot, and enables voluminous transactions/second.
Platform Independent
NanoRADIUS, like all the toolkits in Mocana's Device Security Framework, is CPU architecture and platform independent. NanoRADIUS is immediately available for more than 100 processor/OS combinations, and ports to new platforms typically take only a few hours. Out-of-the-box support is provided for Linux, Monta Vista, VxWorks, OSE, Nucleus, Solaris, ThreadX, Windows, MacOS X, (ARC) MQX, pSOS, and Cygwin. NanoRADIUS is endian-neutral, and can be used without any RTOS.
No Crypto Expertise Needed
Because we built NanoRADIUS from the ground up, it's easy to install and use. You don't need to be a crypto expert because the NanoRADIUS API hides the complexity of cryptography. You can focus on your application development, and let NanoRADIUS take care of the security. Plus, Mocana's developer support team is always available to answer all your questions, be they about crypto, our toolkits, or embedded development in general.
Dramatically Shortens Your Development Cycle
NanoRADIUS is a ready-made, optimized, exhaustively tested RADIUS client that frees your in-house development resources to focus on what's really important: the functionality of your device and its application. The NanoRADIUS API is well documented and provides all the initialization, setup, crypto, and communication functions you need, enabling you to speed through your development and integration efforts and simplify customization. And as always, Mocana's developer support team is available 24/7 to answer your questions.
Architecture
Other Mocana Solutions
In addition to our NanoRADIUS RADIUS client, Mocana also provides the following: an intrusion detection and prevention solution (NanoDefende™); NanoCert™ network application; NanoDTLS™—comprising embeddable DTLS client and server; NanoEAP™—an EAP wireless solution that includes wireless supplicants; NanoSec™—an embeddable IPsec, IKE v1 and v2, and MOBIKE solution; NanoUpdate™ network application enabling secure firmware updates; NanoSSH™—comprising embeddable SSH client and server; and NanoSSH:™—embeddable SSL/TLS client and server. Mocana solutions have an asynchronous core to fully leverage hardware acceleration, provide high performance, and are designed with ease of use in mind. All come with Mocana's comprehensive support and maintenance, and are available individually or as a bundle which composes the Mocana Device Security Framework.
|
 |
