[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: Issue: Zero Tag field in Filter-Rule attribute
- To: "Bernard Aboba" <bernard_aboba@hotmail.com>, <radiusext@ops.ietf.org>
- Subject: RE: Issue: Zero Tag field in Filter-Rule attribute
- From: "Glen Zorn \(gwz\)" <gwz@cisco.com>
- Date: Sat, 26 Aug 2006 10:41:48 -0700
- Authentication-results: sj-dkim-3.cisco.com; header.From=gwz@cisco.com; dkim=pass ( sig from cisco.com verified; );
- Dkim-signature: a=rsa-sha1; q=dns; l=1198; t=1156614152; x=1157478152; c=relaxed/simple; s=sjdkim3002; h=Content-Type:From:Subject:Content-Transfer-Encoding:MIME-Version; d=cisco.com; i=gwz@cisco.com; z=From:=22Glen=20Zorn=20\(gwz\)=22=20<gwz@cisco.com> |Subject:RE=3A=20Issue=3A=20Zero=20Tag=20field=20in=20Filter-Rule=20attribute; X=v=3Dcisco.com=3B=20h=3D+76HfFOWQnbnvzqF477xcnV8Yq8=3D; b=PUxzeKqTC8dFcKyGKy2uvEpyspLn3MupNbXhJDAGhtvgbSMcrPx95Ge7GPK2l6I43bHqIazs 1NPSE4QQBppQ9kYUPmGfw+WMSn3HAqt62RTvaS45dWDYCZu7ATO56Zn5;
Bernard Aboba <> scribbled on Saturday, August 26, 2006 7:52 AM:
,,,
>
> My suggestion is that a value of zero (0) be used to indicate a
> filter-rule that is less than 253 octets, so that concenation if not
> required, and multiple filter-rules can utilize the same zero (0)
> value. Here is the proposed text:
>
> Tag
>
> The Tag field is one octet, and MUST always be present. It is
> used to identify the filter rule that is represented. Where a
> single filter rule exceeds 253 octets in length, the rule may
> be encoded across multiple NAS-Filter-Rule attributes, each
> with the same non-zero Tag value; non-zero Tag values MUST be
> unique for each filter rule present in a RADIUS packet. The
> value of zero (0) in the Tag field indicates that the
> attribute contains a filter rule that does not exceed 253
> octets in length; as a result attributes with a Tag value of
> zero MUST NOT be concatenated, and multiple Filter-Rule
> attributes with a tag value of zero may be included in a
> single RADIUS packet.
Looks good to me.
Hope this helps,
~gwz
--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>