Patent ID: 7624429

Claim:
A method for proxying authentication-authorization-and-accounting (AAA) messages via a network access server, comprising: sending a request from a network access server (NAS) to a first authentication-authorization-and-accounting (AAA) server on a first virtual private network (VPN) connected to a first virtual router of said NAS for a user authentication-authorization-and-accounting, when said first AAA server is not responsible for the user authentication-authorization-and-accounting; receiving a request from said first AAA server to said NAS partially directing said NAS to identify a configuration for a responsible second AAA server, if such information is available; and if no such information is available, receiving a request from said first AAA server to said NAS forcing said NAS to select or identify a configuration for a responsible second AAA server on a second VPN connected to a second virtual router of said NAS; and sending a request from said NAS to said second AAA server, based on said configuration, to perform a real user authentication-authorization-and-accounting and a decisive steering of said NAS; wherein said first and second VPNs are connected only via said NAS.