RE: Issue: Attribute concatenation/splitting

[<Pasi.Eronen@nokia.com>]

Avi Lior wrote:
> I have to read the draft.  Is permit/deny allowed inside the
> attribute because we are allowed to include more then one rule
> inside the packet? If that is the case IMO we should not do that.
> One rule per attribute.

No, it's because there are rule elements (e.g. tunnel-id, org-url
and redir-url) that are more-or-less arbitrary strings. In other
words, you could have a tunnel called "permit" or a URL that
contains the string "deny".

Best regards,
Pasi

--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>