change by vendors without notice. I would appreciate any direct
input, preferably first hand, from implementors.
1.2. Presentation
Without any easy organization for the material, information is
arranged in a simple taxonomy from bottom-up complexity:
- Attribute Usage
- Attribute Data Types
- Message Codes
- New Operations
2. Attribute Usage
The RADIUS RFCs define attribute type ranges and specific attribute
definitions.
- There are about 70 defined RADIUS attributes:
- Values 192-223 are reserved for experimental use
- Values 224-240 are reserved for implementation-specific use
- Values 241-255 are reserved and should not be used.
Mitton Informational [Page 3]
RFC 2882 Extended RADIUS Practices July 2000
Attribute 26 was defined to be the Vendor Specific Attribute (VSA)
with further internal structure to allow vendor expansion.
2.1. Attribute conflicts
In practice attributes 92-255 are in use by a vendor. And another
vendor also use attributes in the 90-104 range and conflicts with
this usage.
To deal with these issues, server vendors have added vendor specific
parameters to their client database files. The administrator has to
indicate the vendor type of NAS along with the client IP address and
secret, so that the server can disambiguate the attribute usage.
One server has a single large vendors file to describe the mapping
all attributes to an internal format that retains the vendor id.
Another server implementation uses multiple dictionaries, each
indexed to a NAS and Vendor Model definition list.
2.2. Attribute Value Conflicts
Adding additional attributes may be more trouble than necessary for
simple features. Often existing RADIUS attributes could be extended
with additional values (particularly attributes that are enumerated
choices). But in doing such there is no way to guarantee not
conflicting with other vendor's extensions.
2.2.1. Vendor Specific Enumerations proposal
One proposed solution to this problem was Vendor Specific
Enumerations (VSEs). That is to imbed the vendor's management ID in
(74 pages)
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Commentaires sur ces manuels