RE: [AAA-WG]: Question regarding IP Filter Rule

[Avi Lior <avi@bridgewatersystems.com>]

Title: Message

Chris,

 

Okay so forgive me but how do I specify where to redirect user traffic in diameter.  Which attributes do that.  Note I am not talking about where to redirect AAA traffic.

 

Avi

-----Original Message-----
From: Christopher Richards [mailto:crich@nortelnetworks.com]
Sent: Tuesday, December 16, 2003 2:32 PM
To: 'Avi Lior'; 'radiusext@ops.ietf.org'; aaa-wg@merit.edu
Subject: RE: [AAA-WG]: Question regarding IP Filter Rule

Hi Avi,

The Diameter RFC (And applications) specify where to redirect user traffic - not how. The "how" is implementation specific.

Best Regards,
Chris.

Shasta Wireless Development
Nortel Networks

Telephone:
+1 972 684 3281
ESN 444 3281

-----Original Message-----
From: Avi Lior [mailto:avi@bridgewatersystems.com]
Sent: Tuesday, December 16, 2003 1:23 PM
To: 'radiusext@ops.ietf.org'; aaa-wg@merit.edu
Subject: [AAA-WG]: Question regarding IP Filter Rule

The Black I-D and PWLAN draft prompted me to check something out.

It seems to me that something is missing in Diameter.  Using the filter specification in 3588 its not clear how I force a forward.  The only actions supported are permit or deny whereas ipfw supports a forward mechanism as well.

The motivation for this is the requirement in (WLAN for example) whereby I want to force all http traffic to a specific portal and deny all other traffic until the portal instructs the NAS otherwise.  This needs to be done either during an Access Accept or mid-session using COA.