Internet-Draft draft-ietf-opsawg-ucl-acl-12.txt is now available. It is a work
item of the Operations and Management Area Working Group (OPSAWG) WG of the
IETF.
Title: A YANG Data Model and RADIUS Extension for Policy-Based Network
Access Control
Authors: Qiufang Ma
Qin Wu
Mohamed Boucadair
Daniel King
Name: draft-ietf-opsawg-ucl-acl-12.txt
Pages: 42
Dates: 2026-02-03
Abstract:
This document defines a YANG data model for policy-based network
access control, which provides enforcement of network access control
policies based on group identity. Additionally, the YANG data model
defined in the document also extends ACLs (Access Control Lists) with
date and time parameters to support schedule-aware policy
enforcement.
Specifically in scenarios where network access is triggered by user
authentication, this document defines a mechanism to ease the
maintenance of the mapping between a user group identifier and a set
of IP/MAC addresses to enforce policy-based network access control.
Moreover, the document defines a Remote Authentication Dial-in User
Service (RADIUS) attribute that is used to communicate the user group
identifier as part of identification and authorization information.
The IETF datatracker status page for this Internet-Draft is:
https://datatracker.ietf.org/doc/draft-ietf-opsawg-ucl-acl/
There is also an HTML version available at:
https://www.ietf.org/archive/id/draft-ietf-opsawg-ucl-acl-12.html
A diff from the previous version is available at:
https://author-tools.ietf.org/iddiff?url2=draft-ietf-opsawg-ucl-acl-12
Internet-Drafts are also available by rsync at:
rsync.ietf.org::internet-drafts
_______________________________________________
OPSAWG mailing list -- [email protected]
To unsubscribe send an email to [email protected]
