I have just had a lecture on VPNs and RADIUS and have a question with regards to authentication. I am aware of protocols such as EAP and PEAP and was wondering how these protocols work alongside RADIUS, if at all.
Ultimately as the question title suggests, if a user would like to connect to a network device on an internal network using SSL VPN how would they authenticate?
My initial thoughts were that the VPN server defines an authentication protocol such as EAP, the user then provides the correct credentials in accordance with the protocol and the VPN server acting as a RADIUS client forwards the data to the RADIUS server using the RADIUS protocol. The RADIUS server looks up the given credentials and if correct issues an acceptance message. The user is then authenticated and the VPN server can allow access to the network resources.
I would be grateful if someone could give me some guidance. I appteciate that my initial thoughts may be completely incorrect.