1. Feature Guide
  2. DSR Features and Functions
  3. RADIUS Signaling Router
  4. Message Authenticator

2.9.5 Message Authenticator

A Message-Authenticator attribute (different from the Authenticator in the RADIUS packet header) is used to authenticate and integrity-protect RADIUS packets in order to prevent spoofing.

A server or client receiving a message with a Message Authenticator attribute present must calculate the expected value of the message authenticator and silently discard the packet if it does not match the value sent.