It is also more scalable and much easier to manage. A single authentication server can support hundreds of communications servers, serving up to tens of thousand of users. This enables the network designer to build a distributed network with centralized database control. Packet filters allow network administrators to limit a user's access to specific services on the network. For example, a user may be allowed to send electronic mail, but not copy data files from the network.
Packet filtering on the communications server analyzes each message being sent from a remote client.
The filter can determine the computer and service the user is attempting to reach and either permit or deny access to that service. These implementations are typically functional, but are not scaleable to large networks and are not formally supported by any corporation. For a scaleable solution, ACC sells and supports Steel Belted Radius Server. The messages can be used for both billing and traffic management. It provides a centralized depository for user authentication information and provides mechanisms to track user traffic and connection times.