<!-- Copyright (c) 2026 defconxt. All rights reserved. -->
<!-- Licensed under AGPL-3.0 — see LICENSE file for details. -->

# Implementing Network Access Control — API & Tool Reference

> Quick reference for tools, commands, and APIs used in implementing-network-access-control.

## Tools

### `freeradius`

RADIUS authentication server

**Usage:**
```bash
freeradius -X
```

**Key Flags:**
  - `-X: debug mode`
  - `-XC: config check only`
  - `-d: config directory`
  - `-n: server name`

---

### `radtest`

RADIUS authentication test client

**Usage:**
```bash
radtest <user> <password> <server> <nas-port> <secret>
```

**Key Flags:**
  - `-t: auth protocol (pap, chap, mschap)`
  - `-x: debug output`

---

### `nmap`

Network posture scanning

**Usage:**
```bash
nmap -sV -O --script=smb-os-discovery <target>
```

**Key Flags:**
  - `-sV: service version detection`
  - `-O: OS detection`
  - `--script: NSE scripts`
  - `-oX: XML output`

---

## Integration Notes

- All tools should be run with least-privilege access appropriate to the task
- Log all tool invocations for audit trail
- Validate tool output before acting on results
- Cross-reference findings with multiple tools where possible

## See Also

- Parent skill: [Network Security](../../../SKILL.md)
- Technique SKILL.md: [../SKILL.md](../SKILL.md)
