Meaning of Acess-Reject (was RE: Comments on draft-carroll-dynmobileip-cdma-04.txt)

["Nelson, David" <dnelson@enterasys.com>]

Avi Lior writes...

> Access-Reject may not always result in the termination of a session
etc...
> 
> For example, when I am doing authorize only, (Access-Accept with
> Service-Type = Authorize-Only) the Access-Reject is a rejection of
that
> authorization and not necessarily the rejection of the entire session
or
> service.  Or is it?

We could have this discussion, and raise an issue relating to any
existing deployments, as part of the RADIUS Issues and Fixes draft.  I
think it would be a very bad idea indeed to change something as
fundamental as the semantics of a RADIUS Access-Reject to *ever* mean
anything other than a termination of NAS service and a termination of
the session (e.g. layer 2 connection) for the attached network host.


--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>