Re: Back to authentication on the IETF network (was: Re: IETF 78: getting to/from/around Maastricht)

2010-07-12 Thread Joel Jaeggli
On 7/12/10 5:48 PM, Randy Bush wrote: What does "physically authenticate people" mean here? Show that they have a badge (common and meets the stated requirement of "keep the IETF network for IETF attendees")? Or write down the name? Or write down the name and the network port for the cable the

Re: Back to authentication on the IETF network (was: Re: IETF 78: getting to/from/around Maastricht)

2010-07-12 Thread Randy Bush
> What does "physically authenticate people" mean here? Show that they > have a badge (common and meets the stated requirement of "keep the > IETF network for IETF attendees")? Or write down the name? Or write > down the name and the network port for the cable they pick up? we'll probably never

Re: Back to authentication on the IETF network

2010-07-12 Thread todd glassey
On 7/12/2010 1:19 PM, Chris Elliott wrote: > On Jul 12, 2010, at 3:54 PM, Ted Hardie > wrote: > >> On Mon, Jul 12, 2010 at 12:41 PM, Chris Elliott > > wrote: >> >>> I will suggest that in Beijing we may need to physically >>> authenticate peop

Re: Back to authentication on the IETF network (was: Re: IETF 78: getting to/from/around Maastricht)

2010-07-12 Thread Chris Elliott
On Jul 12, 2010, at 3:54 PM, Ted Hardie wrote: > On Mon, Jul 12, 2010 at 12:41 PM, Chris Elliott wrote: > >> I will suggest that in Beijing we may need to physically authenticate people >> coming into the terminal room, but I will leave the decision on whether and >> how to do that up to the ho

Re: Back to authentication on the IETF network (was: Re: IETF 78: getting to/from/around Maastricht)

2010-07-12 Thread Ted Hardie
On Mon, Jul 12, 2010 at 12:41 PM, Chris Elliott wrote: > I will suggest that in Beijing we may need to physically authenticate people > coming into the terminal room, but I will leave the decision on whether and > how to do that up to the host in Beijing. > > Chris. What does "physically authent

Back to authentication on the IETF network (was: Re: IETF 78: getting to/from/around Maastricht)

2010-07-12 Thread Chris Elliott
We will not be doing 802.1X authentication on any wired ports. Remember, we really want an open network, while giving people a way of encrypting their wireless traffic. This time, in preparation for Beijing, we have the requirement to authenticate that people using the wireless network are attendi