[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Issue] multiple source addresses
Description of issue: Multiple NAS address options
Submitter name: Greg Weber
Submitter email address: gdweber@cisco.com
Date first submitted: 1/9/06
Reference: n/a
Document: draft-aboba-radext-fixes-01.txt
Comment type: T/E
Priority: 1
Section: 2.7.2
Rationale/Explanation of issue:
Regarding this text:
There are situations in which a RADIUS client or server may have
multiple addresses. For example, a dual stack host can have both
IPv4 and IPv6 addresses; a host that is a member of multiple VLANs
could have IPv4 and/or IPv6 addresses on each VLAN; a host can have
multiple IPv4 or IPv6 addresses on a single interface. However,
[RFC2865] Section 5.44 only permits zero or one NAS-IPv4-Address
attributes within an Access-Request and [RFC3162] Section 3 only
permits zero or one NAS-IPv6-Address attributes within an Access-
Request. Where a NAS has more than one global address, it is
RECOMMENDED that the NAS include the NAS-Identifier attribute in an
Access-Request in order to identify itself to the RADIUS server.
More typically, this situation has been addressed by allowing the NAS
RADIUS client implementation to specify which address should be used
(either globally or perhaps based on additional information about the
type of request).
Requested change:
Can we change the condition on the RECOMMENDATION to something
like 'When a NAS has more than one global address and no ability
to determine which is used for identification in a particular
request, ...'.
Also, can you change:
"NAS-IPv4-Address" -> "NAS-IP-Address" and
"Account-Session-ID" -> "Acct-Session-Id" in the doc.
--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>