RE: : Re: authors 48 hours: RFC 4005

<[email protected]> Fri, 3 Jun 2005 15:57:16 +0300
Newsgroups gmane.ietf.aaa
Message-ID <[email protected]>
David,

> >  we could use one of the unused flags in the
> >Diameter packet header and set it when a Diameter message passes
> >through a RADIUS->Diameter gateway; this would require special
> >purpose logic in the Diameter "server", however it would ensure that
> >the RADIUS rules were followed (if possible).
> 
> Well, I'm not convinced that the server MUST know the origin of the request.
> Operationally that would depends on whether the response would violate RADIUS rules.
> I'm not sure what service the server would return to a NAS that wouldn't work, but there is
> a possibility, so lets say there's something we want here.
> 
> Some RADIUS systems solve this (in particular for VSAs) by having the 
> network admin configure a NAS model table along with the IP address.  They 
> could add a RADIUS/Diameter protocol type.  But that's out of protocol.
> 
> But I've actually always liked identifying information in 
> requests.  Instead of a flag, I would think an Origin-Host-Protocol AVP 
> would be useful.  (personally, I'd love to see Make, Model, and version 
> number too)  With a protocol enumeration, heck someone could build a TACACS 
> to Diameter gateway.
> 
> I think this is a good idea.  It should probably be re-fitted into the 
> Base, and included in all Diameter requests.  Likewise, a RADIUS equivalent attribute 
> could be created.

I think that this might be a good way to solve this, going forward. Could we document
this behavior in a new draft; this could potentially update Diameter Base, if
the wg agrees.

John