Re: [AAA-WG]: Question regarding IP Filter Rule

[Jari Arkko <jari.arkko@piuha.net>]

Avi Lior wrote:
> Hi Jari,
>
> You could use Framed-Route but now all traffic would be routed to the Portal
> etc.....
>
> I think it would be more appropriate to introduce a new attribute so that:
>
> A) the NAS would deal with the routing functions (as it always does) and the
> Portal does not have to do it.
>
> B) We would have the flexibility to decide whether to route all traffic or
> just some traffic.

Perhaps.

Are the redirection schemes used for payment? I.e. I need to log in to the
web page before I can continue? Or for something else?

There is a difference because if its used for payment, redirecting
just some protocols may leave a hole to the protocols. For instance,
I have sometimes succeeded in doing all my e-mail over SSH even if
there was some http-directing thing that prevented all web traffic.

--Jari



--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>