Re: Comments on "practical deployments"

[Alan DeKok <aland@nitros9.org>]

Bernard_Aboba@hotmail.com wrote:
>>  problems in practical deployments.
> 
> Which "practical deployments" are we talking about?

  RADIUS proxies.  There are multiple inter-telco && inter-country
deployments using RADIUS.  I'm not aware of any similar large-scale
deployment of Diameter.  (i.e. everyone I've talked to says "perhaps one
day we'll move to Diameter".)

> While proxies are widely used today to facilitate inter-domain
> roaming, as far as I know, the combination of inter-domain roaming
> and EAP is very rare.

  The FMCA is trialling exactly this.

> While EAP-based technologies such as WiMAX may change the
> situation, as I understand it, the use of EAP today is largely confined
> to enterprise scenarios.    For example, the vast majority of all
> IEEE 802.11 hotspot deployments use Web-based access (e.g. UAM), not EAP.

  Yes.  In fact, the use of EAP *prevents* a large number of business
models for network access.

> In terms of major EAP deployments that support inter-domain roaming
> with substantial usage, one deployment (EDUROAM) is several orders of
> magnitude larger than any other that I am aware of.

  UMA leverages EAP and RADIUS, but it's buried deep in the network.

> As far as I know, EDUROAM does not use Diameter nor are there any
> major deployments of Diameter EAP.

  Yes.

> Am I missing something, or are there really any "practical experience"
> here?

  Practical experience with existing AAA servers, proxies, and business
models.  The current technology is RADIUS.  I'm trying to figure out how
 AAA redirection (and avoiding the intermediary proxies) helps anyone.
I don't think it does.

  Alan DeKok.

--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>