"RADIUS Design Guidelines", Greg Weber, Alan DeKok, 5-Mar-09. ( bytes)

This document provides guidelines for the design of attributes used by the Remote Authentication Dial In User Service (RADIUS) protocol. It is expected that these guidelines will prove useful to authors and reviewers of future RADIUS attribute specifications, both within the IETF as well as other Standards Development Organizations (SDOs).

"Extended Remote Authentication Dial In User Service (RADIUS) Attributes", Yong Li, Avi Lior, Glen Zorn, 30-Mar-09. ( bytes)

For the Remote Authentication Dial In User Service (RADIUS) protocol to continue to support new applications, the RADIUS attribute type space must be extended beyond the current limit of 255 possible attribute types while maintaining backwards compatibility with the existing protocol. This document defines a mechanism to accomplish that task, along with standard methods to group together related attributes and to encode values that don't fit into 253 octets.

"TLS encryption for RADIUS over TCP (RadSec)", Stefan Winter, Mike McCauley, Stig Venaas, Klaas Wierenga, 13-Jul-09. ( bytes)

This document specifies security on the transport layer (TLS) for the RADIUS protocol [RFC2865] when transmitted over TCP [I-D.dekok-radext-tcp-transport]. This enables dynamic trust relationships between RADIUS servers.

"Use of Status-Server Packets in the Remote Authentication Dial In User Service (RADIUS) Protocol", Alan DeKok, 2-Mar-09. ( bytes)

RFC 2865 defines a Status-Server code for use in RADIUS, but labels it as "Experimental" without further discussion. This document describes a practical use for the Status-Server packet code, which is to let clients query the status of a RADIUS server. These queries, and responses (if any) enable the client to make more informed decisions. The result is a more stable, and more robust RADIUS architecture.

"RADIUS Over TCP", Alan DeKok, 1-Mar-09. ( bytes)

The Remote Authentication Dial In User Server (RADIUS) Protocol has traditionally used the User Datagram Protocol (UDP) as it's underlying transport layer. This document defines RADIUS over the Transmission Control Protocol (TCP).

"NAI-based Dynamic Peer Discovery for RADIUS over TLS and DTLS", Stefan Winter, Mike McCauley, 13-Jul-09. ( bytes)

This document specifies a means to find authoritative AAA servers for a given NAI realm as defined in [RFC4282]. It can be used in conjunction with RADIUS over TLS and RADIUS over DTLS.

Return to Internet-Draft directory.

Return to IETF home page.