IETF Logo Mail Archive

RE: Comments on "practical deployments"

Bernard Aboba <bernard_aboba@hotmail.com> Wed, 26 December 2007 20:22 UTC

Return-path: <owner-radiusext@ops.ietf.org>
Received: from [10.91.34.44] (helo=ietf-mx.ietf.org) by megatron.ietf.org with esmtp (Exim 4.43) id 1J7cmF-0002wC-IP for radext-archive-IeZ9sae2@lists.ietf.org; Wed, 26 Dec 2007 15:22:55 -0500
Received: from psg.com ([147.28.0.62]) by ietf-mx.ietf.org with esmtp (Exim 4.43) id 1J7cmD-0007v0-8W for radext-archive-IeZ9sae2@lists.ietf.org; Wed, 26 Dec 2007 15:22:55 -0500
Received: from majordom by psg.com with local (Exim 4.68 (FreeBSD)) (envelope-from <owner-radiusext@ops.ietf.org>) id 1J7chm-0005T5-Te for radiusext-data@psg.com; Wed, 26 Dec 2007 20:18:18 +0000
X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on psg.com
X-Spam-Level:
X-Spam-Status: No, score=-2.2 required=5.0 tests=AWL,BAYES_00,HTML_MESSAGE, RDNS_NONE autolearn=no version=3.2.3
Received: from [65.54.246.149] (helo=bay0-omc2-s13.bay0.hotmail.com) by psg.com with esmtp (Exim 4.68 (FreeBSD)) (envelope-from <bernard_aboba@hotmail.com>) id 1J7chk-0005Sj-B7 for radiusext@ops.ietf.org; Wed, 26 Dec 2007 20:18:17 +0000
Received: from BAY117-W37 ([207.46.8.72]) by bay0-omc2-s13.bay0.hotmail.com with Microsoft SMTPSVC(6.0.3790.3959); Wed, 26 Dec 2007 12:18:16 -0800
Message-ID: <BAY117-W3758C09D67E3325B1B40B2935B0@phx.gbl>
Content-Type: multipart/alternative; boundary="_6dd47e72-f355-459e-9cd1-8663ebd42293_"
X-Originating-IP: [67.183.152.50]
From: Bernard Aboba <bernard_aboba@hotmail.com>
To: Alan DeKok <aland@nitros9.org>
CC: radiusext@ops.ietf.org
Subject: RE: Comments on "practical deployments"
Date: Wed, 26 Dec 2007 12:18:16 -0800
Importance: Normal
In-Reply-To: <BAY117-W3433D8E315C9DE7FCAE78C935B0@phx.gbl>
References: <tslabo4d851.fsf@mit.edu> <BAY117-W1792E6240C29062FF9B6F2935F0@phx.gbl> <47729414.9070608@nitros9.org> <BAY117-DS2531749CE88B51BFA1941935B0@phx.gbl> <4772AC0D.1000401@nitros9.org> <BAY117-W3433D8E315C9DE7FCAE78C935B0@phx.gbl>
MIME-Version: 1.0
X-OriginalArrivalTime: 26 Dec 2007 20:18:16.0155 (UTC) FILETIME=[72B05AB0:01C847FC]
Sender: owner-radiusext@ops.ietf.org
Precedence: bulk
X-Spam-Score: -4.0 (----)
X-Scan-Signature: 5a9a1bd6c2d06a21d748b7d0070ddcb8

> The FMCA is trialling exactly this. 

It will be interesting to see how well it works.  I have previously been involved in a number of 
inter-domain roaming trials.  When the RADIUS traffic was routed through an exchange point,
the results were not very promising.  With packet loss rates of 1-5%, RADIUS retransmissions
were pretty common and this would often lead to EAP retransmissions.  The overall
authentication times could get pretty long and sometimes authentication wouldn't complete
at all.  Most of the carriers we worked with ended up deploying web portals instead :(

v2.46.0 | Report a Bug | By Email | System Status