Back to authentication on the IETF network (was: Re: IETF 78: getting to/from/around Maastricht)

2010-07-12 Thread Chris Elliott
We will not be doing 802.1X authentication on any wired ports. Remember, we really want an open network, while giving people a way of encrypting their wireless traffic. This time, in preparation for Beijing, we have the requirement to authenticate that people using the wireless network are

Re: Back to authentication on the IETF network (was: Re: IETF 78: getting to/from/around Maastricht)

2010-07-12 Thread Ted Hardie
On Mon, Jul 12, 2010 at 12:41 PM, Chris Elliott chell...@pobox.com wrote: I will suggest that in Beijing we may need to physically authenticate people coming into the terminal room, but I will leave the decision on whether and how to do that up to the host in Beijing. Chris. What does

Re: Back to authentication on the IETF network (was: Re: IETF 78: getting to/from/around Maastricht)

2010-07-12 Thread Chris Elliott
On Jul 12, 2010, at 3:54 PM, Ted Hardie ted.i...@gmail.com wrote: On Mon, Jul 12, 2010 at 12:41 PM, Chris Elliott chell...@pobox.com wrote: I will suggest that in Beijing we may need to physically authenticate people coming into the terminal room, but I will leave the decision on whether and

Re: Back to authentication on the IETF network (was: Re: IETF 78: getting to/from/around Maastricht)

2010-07-12 Thread Randy Bush
What does physically authenticate people mean here? Show that they have a badge (common and meets the stated requirement of keep the IETF network for IETF attendees)? Or write down the name? Or write down the name and the network port for the cable they pick up? we'll probably never know.

Re: Back to authentication on the IETF network (was: Re: IETF 78: getting to/from/around Maastricht)

2010-07-12 Thread Joel Jaeggli
On 7/12/10 5:48 PM, Randy Bush wrote: What does physically authenticate people mean here? Show that they have a badge (common and meets the stated requirement of keep the IETF network for IETF attendees)? Or write down the name? Or write down the name and the network port for the cable they