Re: [secdir] secdir review of draft-ietf-opsec-protect-control-plane-04

[Rodney Dunn <[e-mail]>]

Fixed and updated:

"Permit RADIUS authentication and accounting replies from RADIUS servers 
198.51.100.9, 198.51.100.10, 2001:DB8:100::9, and 2001:DB8:100::10 that 
are listening on UDP ports 1812 and 1813.
Note that this does not accommmodate a server using pre-standard UDP 
ports of 1645 and 1646."


Thanks,
Rodney




On 12/14/10 6:26 AM, Joe Abley wrote:
>
> On 2010-12-14, at 09:16, Rodney Dunn wrote:
>
>> Thanks Joe/Glen,
>>
>> I made the updates to change them to 1812/1813 with a not to the reference to the 1645/1646 ports.
>>
>> "Permit RADIUS authentication and accounting replies from RADIUS servers 198.51.100.9, 198.51.100.10, 2001:DB8:100::9, and 2001:DB8:100::10 that are listening on UDP ports 1812 and 1813. Note that this doesn't account for a server using the commonly deployed pre-standard UDP ports of 1812 and 1813."
>
> I think you mean "1645 and 1646" in the final sentence.
>
> I would also drop "commonly deployed" since I think the phrase is subjective and difficult to qualify, and replace "account for" with "accommodate" since one of the ports you're opening a hole for is for accounting and different uses of the same word seems worth avoiding (e.g. for non-English speakers).
>
>
> Joe
>