Re: [dhcwg] DHCP interconnected to RADIUS for AAA

Chen, Weijing wrote:
> Questions for DHCP experts:
> 
> 1)  Does today's DHCP protocol specification support the client
> authentication by user@domain and password?  If not, is it possible to
> extend it?
> 
> 
> 2)  Is there any DHCP server implementation of obtaining IP address
> assignment through RADIUS protocol (i.e. IP address pool managed by RADIUS)?

Maybe 802.1x is a solution for you? There you have an authentication on
the switch-PORT (which could be done with a RADIUS-backend), and *after*
you are authenticated the port is open and you can communicate with the
network - you can only communicate with your DHCP *after* you passed the
authentification-process.

If your RADIUS uses LDAP as backend-database you probably can have some
uid-password-mac-ip-mappings stored in the database, and DHCP is able
(at least with a patch) to use LDAP as configuration-base.

> --

^ correct quotes are ^-- $ (note the *space*)

regards
-- 
           \\\ ||| ///                               _\=/_
            (  @ @  )                                (o o)
+--------oOOo-(_)-oOOo--------------------------oOOo-(_)-oOOo------+
| Markus Schabel      TGM - Die Schule der Technik   www.tgm.ac.at |
| IT-Service          A-1200 Wien, Wexstrasse 19-23  net.tgm.ac.at |
| markus.schabel@tgm.ac.at                   Tel.: +43(1)33126/316 |
| markus.schabel@members.fsf.org             Fax.: +43(1)33126/154 |
| FSF Associate Member #597, Linux User #259595 (counter.li.org)   |
|        oOOo        Yet Another Spam Trap:     oOOo               |
|       (    )    oOOo    yast@tgm.ac.at       (   )     oOOo      |
+--------\  (----(   )--------------------------\ ( -----(   )-----+
           \_)     ) /                            \_)      ) /
                  (_/                                     (_/

Computers are like airconditioners:
   They stop working properly if you open windows.

_______________________________________________
dhcwg mailing list
dhcwg@ietf.org
https://www1.ietf.org/mailman/listinfo/dhcwg