[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: NAS-Port-Type and sub-types?




> This goes back to the "network selection" problem, and the discussion of
> using NAS-Port-Type for that purpose. If all RADIUS ever sees from these
> technologies is EAP traffic, does it matter? If we are to add new
> authentication methods to RADIUS, as we did with Digest Auth, then it may
> matter.

I think it does matter, in the case of 11s vs. 11i, for example.  There is  difference between
authorizing a user to join a mesh network as a Mesh Point, and authorizing a user to join
the network as a Station.  The set of users authorized to act as a Mesh Point may be quite
small compared to those authorized to act as a station.  So if the user were associating
as a Mesh Point, their authorization might be rejected, but if they were associating for
11i or 11r, they might be authorized.