This includes the ability for the external entity, such as a middleware server, to use the existing database connection under a different user without the need to authenticate the new connection user.

If the NAS receives user-connection requests, it passes them to the designated RADIUS server which authenticates the user and returns the user's configuration information to the NAS.

Set a reasonable limit on the amount of data that you require the user to download based on your user base's connection metric (for example, dialup, high-speed, and so on).