|
Ok, thanks From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Guy Davies Which Vendor
Specific Attributes are implemented by a Vendor are, as the name suggests,
specific to the vendor and totally up to them to choose. I would not be
surprised if DLink implement *NO* VSAs. Given the market into which
they're pitching their kit, I doubt very much that their kit will do bandwidth
control. Authenticating access to the port is the basic function of
802.1x so if DLink claim 802.1x support, then you can configure your NAS
so that you don't get any access without authenticating first. Rgds, Guy From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Alex M Ok I got it… By the way what is AV pair? And how do you get NAS related attributes
to control bandwidth from vendors? Like if im using D-Link how could I get
attributes from them? Thanks! From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Jeff Reilly Alex, Features such as 'bandwidth and port blocking" (if any) are
allocated/configured on the _NAS_
(in this case a NAS port) via AV pair/s provided by RADIUS... the '802.1x
Supplicant" (Client/Endpoint) in simple terms... provides a
secure/standard conduit which facilitates the communication of credentials
(from the Supplicant to the Authenticator). The '802.1x
Authenticator" (or NAS) _MAY_ provision/enforce Authorization for the
specific endpoint in the context of a user or group... The management & granularity of this functionality verifies greatly
by switch vendor as a result providing this functionality across a multi-vendor
environment... in a large scale deployment... is often too complex to seriously
consider.<? jmr
This e-mail is private and may be confidential and is for the intended recipient only. If misdirected, please notify us by telephone and confirm that it has been deleted from your system and any copies destroyed. If you are not the intended recipient you are strictly prohibited from using, printing, copying, distributing or disseminating this e-mail or any information contained in it. We use reasonable endeavours to virus scan all e-mails leaving the Company but no warranty is given that this e-mail and any attachments are virus free. You should undertake your own virus checking. The right to monitor e-mail communications through our network is reserved by us. |
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
