RE: [eap] Ordered delivery of EAP messages

["Bernard Aboba" <bernard_aboba@hotmail.com>]

RADIUS could conceivably reorder packets even where there is no EAP 
retransmission.

This would seem to be most likely in trans-continental roaming scenarios 
where the RTTs could be quite large, and the RADIUS RTO is set low (e.g. a 
second or less) without backoff.

Trans-continential roaming test have shown very high failure rates for EAP 
conversations with lots of roundtrips, so I wouldn't be surprised if this 
issue was showing up in real networks.

One way to make this less likely would be for the NAS to detect FRTO via 
Event-Timestamp & Identifier change, and then wait until sending a new 
Access-Request, to allow the retransmitted Access-Request to drain from the 
network.


Alper said:

The problem scenario requires EAP-layer retransmission, correct?
Authentication server does not perform such retransmission. So, I don't see
equivalence between the two legs of the EAP transport.



--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>