Remote Authentication Dial In User Service is a protocol that allows network devices such as routers to authenticate users against a database.
Passwords are encrypted using the RADIUS secret. Authorization to access a service is granted when a request matches a group of attributes such as the IP address of the requesting client. Authentication and authorization data are stored in user profiles. RADIUS also supports accounting, which is commonly used for billing and statistical purposes.