RE: Review of Management Authorization -00 document

["David B. Nelson" <d.b.nelson@comcast.net>]

Bernard Aboba writes...

> > I think that the way you would specify the secure remote terminal
> > service of SSH would be using Service-Type=NAS-Prompt,
> > Management-Transport-Protocol=SSH.
> 
> You might say that in the document.

Yes.

From examples section of the -01 version, just now submitted:

2.  CLI access, via the secure remote terminal service of SSH, to the
       non-privileged user access level:

       *  Service-Type (6) = NAS-Prompt (7)
       *  Management-Transport-Protocol (xx) = SSH (2)


> Would Service-Type = NAS-Prompt and Transport=TLS mean telnet 
> over TLS?

It would probably mean telnet, although it could also mean some other form
of remote terminal service (e.g. rlogin).  It would certainly mean "over
TLS".




--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>