Network access server: Difference between revisions

Revision as of 06:19, 20 June 2011

Latest revision as of 07:57, 28 July 2025

(30 intermediate revisions by 27 users not shown)

Line 1:

{{redirect-distinguish|NAS server|Network-attached storage}}

{{Unreferencedmore citations|date=October 20092022}}

A '''Network Access Server''' ('''NAS''') is a single point of access to a remote resource.

==Overview==

A '''network access server''' ('''NAS''') is a group of components that provides remote users with a point of access to a network.<ref>{{Cite book |last=Clark |first=Martin P. |url=https://books.google.com/books?id=HccWEdLdacwC&pg=PA542 |title=Data Networks, IP and the Internet: Protocols, Design and Operation |date=2003-05-07 |publisher=[[John Wiley & Sons]] |isbn=978-0-470-84856-2 |language=en |page=542}}</ref><ref>{{Cite book |last=Held |first=Gilbert |url=https://books.google.com/books?id=06uBL8vGpoIC&pg=PA205 |title=Network Design: Principles and Applications |date=2000-05-31 |publisher=[[CRC Press]] |isbn=978-1-4200-9375-9 |language=en |page=205}}</ref>

Concentrates dial-in and dial-out user communications. An access server may have a mixture of analog and digital interfaces and support hundreds of simultaneous users.

==Overview==

Communications processor that connects asyncronous devices to a LAN or WAN through network and terminal emulation software. Performs both synchronous and asynchronous routing of supported protocols. Sometimes called a network access server (NAS).

A NAS concentrates dial-in and dial-out user communications. An access server may have a mixture of analog and digital interfaces and support hundreds of simultaneous users. A NAS consists of a [[communications processor]] that connects asynchronous devices to a [[LAN]] or [[Wide area network|WAN]] through network and [[terminal emulation]] software. It performs both synchronous and asynchronous routing of supported protocols.

The NAS is meant to act as a [[Gateway (telecommunications)|gateway]] to guard access to a protected resource. This can be anything from a [[telephone]] [[Telecommunications network|network]], to [[computer printer|printers]], to the [[Internet]]. A [[Client (computing)|client]] connects to the NAS. The NAS then connects to another resource asking whether the client's supplied [[credentials]] are valid. Based on that answer the NAS then allows or disallows access to the protected resource.

The [[Client (computing)|client]] connects to the NAS. The NAS then connects to another resource asking whether the client's supplied credentials are valid. Based on that answer the NAS then allows or disallows access to the protected resource.

==Examples==

The above translates into different implementations for different uses. Here are some examples.

*An [[Internet Serviceservice Providerprovider]] which provides network access via common modem or modem-like devices (be it [[PSTN]], [[DSL]], [[cable modem|cable]] or [[GPRS]]/[[UMTS]]) can have one or more NAS (network access server) devices which accept [[Point-to-Point Protocol|PPP]], [[PPPoE]] or [[PPTP]] connections, checking credentials and recording accounting data via back-end [[RADIUS]] servers, and allowing users access through that connection.

*A sample use is theThe [[captive portal]] mechanism used by many [[WiFi]] providers: a user wants to access to the Internet. Heand opens hisa [[web browser|browser]]. The NAS detects that the user is not currently [[authorized]] to have access to the Internet, so the NAS prompts the user for their username and password. The user supplies them and sends them back to the NAS. The NAS then uses the [[RADIUS]] protocol to connect to an [[AAA protocol|AAA]] server and passes off the [[username]] and [[password]]. The RADIUS server searches through its resources and finds that the credentials are valid and notifies the NAS that it should grant the access. The NAS then grants the user access to the internetInternet.

*Another use of a NAS would be in [[VoIPvoice over IP]] (VoIP). However, instead of using a username and password, many times a [[phone number]] or [[IP Address]] are used. If the phone number is a valid customer then the call can be completed. Other uses might be ifto theverify whether a phone number has [[long distance calling|long distance]] access or if a [[telephone card]] has minutes left.

==Associated protocols==

*A sample use is the [[captive portal]] mechanism used by many [[WiFi]] providers: a user wants to access to the Internet. He opens his [[web browser|browser]]. The NAS detects that the user is not currently [[authorized]] to have access to the Internet, so the NAS prompts the user for their username and password. The user supplies them and sends them back to the NAS. The NAS then uses the [[RADIUS]] protocol to connect to an [[AAA protocol|AAA]] server and passes off the [[username]] and [[password]]. The RADIUS server searches through its resources and finds that the credentials are valid and notifies the NAS that it should grant the access. The NAS then grants the user access to the internet.

Although not required, NASs are almost exclusively used with [[AAA protocol|Authenticationauthentication, Authorizationauthorization, and Accountingaccounting]] (AAA) servers. Of the AAA protocols available, [[RADIUS]] tends to be the most widely used. The [[Diameter (protocol)|Diameter]] base protocol extends RADIUS services by providing error handling and inter-___domain communications. This protocol is used in networks like the [[IP Multimedia Subsystem]] (IMS).

==See also==

*Another use of a NAS would be in [[VoIP]]. However, instead of using a username and password, many times a [[phone number]] or [[IP Address]] are used. If the phone number is a valid customer then the call can be completed. Other uses might be if the phone number has [[long distance calling|long distance]] access or if a [[telephone card]] has minutes left.

* [[Terminal server]]

==AssociatedExternal Protocolslinks==

* {{Sum RFC|2881|ref=yes}}

Although not required, NASs are almost exclusively used with [[AAA protocol|Authentication, Authorization, and Accounting]] (AAA) servers. Of the AAA protocols available, [[RADIUS]] tends to be the most widely used. The [[Diameter (protocol)|Diameter]] base protocol extends RADIUS services by providing error handling and inter-___domain communications. This protocol is used in networks like the [[IP Multimedia Subsystem]] (IMS).

==See alsoReferences==

{{reflist}}

* [[Terminal server]]

{{DEFAULTSORT:Network Access Server}}

Line 31 ⟶ 32:

[[Category:Telephony]]

[[Category:Telecommunications infrastructure]]

{{Compu-network-stub}}

[[de:Network Access Server]]

[[es:Network access server]]

[[it:Network Access Server]]

[[ja:ネットワークアクセスサーバ]]

[[pl:Network Access Server]]