Re: [Isms] What granularity of attributes do we need for the secure transport?

["David B. Nelson" <dnelson at elbrysnetworks.com>]

David Harrington writes...

> If RADIUS will specify requirements for the service, we MUST be able
> to verify we do meet the requirements.

Yes.  It need not be done within the SNMP engine and, for the reasons you
have described, that's not a likely place for this enforcement to exist.  I
would think the likely place would be in the SSH server at the NAS.  It
could also exist in the RADIUS server, based on suitable "hint" attributes.
I think that is a user configuration choice, however, not a protocol design
choice.


_______________________________________________
Isms mailing list
Isms at ietf.org
https://www.ietf.org/mailman/listinfo/isms