What is RADSEC server?

In the communication between the device and the RADIUS server, currently transmitted messages are using plaintext, which can cause data leakage during message transmission.
Considering the security of message transmission, it is better to use TLS for message transmission. Add a RADSEC server in the network topology, and the device's RADIUS packets are first sent to the RADSEC server through TLS, which then parses them and sends them to the RADIUS server.
Due to the fact that the packets between RADSEC and RADIUS servers are not exposed to the external network, the security of RADIUS packet transmission can be guaranteed.

RADSEC configures RADIUS through TLS (Transport Layer Security Protocol) to redirect regular RADIUS traffic to remote RADIUS servers connected through TLS.
TLS connections provide encryption, authentication, and data integrity for the exchange of RADIUS messages.
To configure RADIUS through TLS, the RADSEC server needs to be configured as the target for RADIUS traffic.
After that, the information flow sent to the RADIUS server can then be redirected to the RAIDEC target.
The RADSEC target is identified by a unique digital ID, and multiple RADSEC targets can be configured with different parameters pointing to the same RADSEC server.