On 8/16/2009 04:30 AM, Alan DeKok wrote:
David Mitton wrote:
>> The main limitation on bulk data transfer is that most EAP to
>> RADIUS gateways (AP's, etc.) will terminate an EAP session after ~50
>> packets.
>
> This kind of thing drives me crazy. Why are their such policies?
To prevent bulk transfer of data over EAP, among others.
This would seem like a highly unlikely scenario, as in most system,
someone privileged would have
to install this rogue EAP module in the AAA system.
> Please do not build EAP session breaking assumptions into AAA
implementations.
It would be useful to codify these experiences into an EAP "best
practices" document.
I've done it before... (I'll find the proceedings reference)
An update is coming....
Dave.
Alan DeKok.
_______________________________________________
Emu mailing list
[email protected]
https://www.ietf.org/mailman/listinfo/emu
