Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) Radius (fwd)



Once upon a time Kevin A. Smith shaped the electrons to say...
>Huh? The non-RFC-ness of this is in the RADIUS daemon. The MAX in all
>recent releases supports the RFC Filter-Id....

Which I think is very good BTW.

A couple of users told me there is a limit on the number of filters you
can place in a MAX.  Is there some hard limit?

>The MAX still asks for a bunch of weird stuff at startup, some of which can
>be disabled. That ought not to cause too much bother to any RADIUS server.
>Otherwise, it should act RFC-like, as should AAC when talking to other
>NAS'.

As long as it is using RFC data types, it is a step in the right direction.
Even the bogus high-number attributes can simply be added to an RFC based
RADIUS server.

Taking it further what I'd really like to see is all of the Ascend extended
attributes moved over to VSAs so that the space Ascend has grabbed is free
again.  I don't have a problem with filters coming from RADIUS - both 3Com
and Cisco do it I believe - they just use VSAs and allow the NAS to process
them.  So it doesn't require the RADIUS server to pre-process them into a
binary object.

-MZ
-- 
<URL:mailto:megazone@megazone.org> Gweep, Discordian, Author, Engineer, me..
Join ISP/C Internet Service Providers' Consortium <URL:http://www.ispc.org/>
"A little nonsense now and then, is relished by the wisest men" 781-788-0130
<URL:http://www.gweep.net/>  <URL:http://www.megazone.org/>  Hail Discordia!
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>