<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns="http://www.w3.org/TR/REC-html40" xmlns:v =
"urn:schemas-microsoft-com:vml" xmlns:o =
"urn:schemas-microsoft-com:office:office" xmlns:w =
"urn:schemas-microsoft-com:office:word"><HEAD>
<META http-equiv=Content-Type content="text/html; charset=us-ascii">
<META content="MSHTML 6.00.2900.2769" name=GENERATOR><!--[if !mso]>
<STYLE>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</STYLE>
<![endif]-->
<STYLE>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:Arial;
color:navy;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</STYLE>
<!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]--></HEAD>
<BODY lang=EN-US vLink=purple link=blue>
<DIV dir=ltr align=left><SPAN class=135513517-02112005><FONT face="Courier New"
color=#0000ff size=2>Which Vendor Specific Attributes are implemented by a
Vendor are, as the name suggests, specific to the vendor and totally up to them
to choose. I would not be surprised if DLink implement *NO* VSAs.
Given the market into which they're pitching their kit, I doubt very much that
their kit will do bandwidth control. Authenticating access to the port is
the basic function of 802.1x so if DLink claim 802.1x support, then you can
configure your NAS so that you don't get any access without authenticating
first.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=135513517-02112005><FONT face="Courier New"
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=135513517-02112005><FONT face="Courier New"
color=#0000ff size=2>Rgds,</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=135513517-02112005><FONT face="Courier New"
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=135513517-02112005><FONT face="Courier New"
color=#0000ff size=2>Guy</FONT></SPAN></DIV><BR>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B>
freeradius-users-bounces@lists.freeradius.org
[mailto:freeradius-users-bounces@lists.freeradius.org] <B>On Behalf Of </B>Alex
M<BR><B>Sent:</B> 02 November 2005 17:04<BR><B>To:</B> 'FreeRadius users mailing
list'<BR><B>Subject:</B> RE: 802.1x<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV class=Section1>
<P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN
style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Ok I got
it…<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN
style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">By the way what is AV
pair?<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN
style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">And how do you get NAS
related attributes to control bandwidth from vendors? Like if im using D-Link
how could I get attributes from them?<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN
style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN
style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Thanks!<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN
style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"><o:p> </o:p></SPAN></FONT></P>
<DIV>
<DIV class=MsoNormal style="TEXT-ALIGN: center" align=center><FONT
face="Times New Roman" size=3><SPAN style="FONT-SIZE: 12pt">
<HR tabIndex=-1 align=center width="100%" SIZE=2>
</SPAN></FONT></DIV>
<P class=MsoNormal><B><FONT face=Tahoma size=2><SPAN
style="FONT-WEIGHT: bold; FONT-SIZE: 10pt; FONT-FAMILY: Tahoma">From:</SPAN></FONT></B><FONT
face=Tahoma size=2><SPAN style="FONT-SIZE: 10pt; FONT-FAMILY: Tahoma">
freeradius-users-bounces@lists.freeradius.org
[mailto:freeradius-users-bounces@lists.freeradius.org] <B><SPAN
style="FONT-WEIGHT: bold">On Behalf Of </SPAN></B>Jeff Reilly<BR><B><SPAN
style="FONT-WEIGHT: bold">Sent:</SPAN></B> Wednesday, November 02, 2005 11:53
AM<BR><B><SPAN style="FONT-WEIGHT: bold">To:</SPAN></B> FreeRadius users mailing
list<BR><B><SPAN style="FONT-WEIGHT: bold">Subject:</SPAN></B> RE:
802.1x</SPAN></FONT><o:p></o:p></P></DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN
style="FONT-SIZE: 12pt"><o:p> </o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN
style="FONT-SIZE: 12pt">Alex,<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN
style="FONT-SIZE: 12pt">Features such as 'bandwidth and port blocking" (if any)
are allocated/configured on the _<I><SPAN
style="FONT-STYLE: italic">NAS</SPAN></I>_ (in this case a NAS port) via AV
pair/s provided by RADIUS... the '802.1x Supplicant" (Client/Endpoint) in
simple terms... provides a secure/standard conduit which facilitates the
communication of credentials (from the Supplicant to the Authenticator).
The '802.1x Authenticator" (or NAS) _MAY_ provision/enforce Authorization
for the specific endpoint in the context of a user or group...
<o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN
style="FONT-SIZE: 12pt"> <o:p></o:p></SPAN></FONT></P>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN
style="FONT-SIZE: 12pt">The management & granularity of this functionality
verifies greatly by switch vendor as a result providing this functionality
across a multi-vendor environment... in a large scale deployment... is often too
complex to seriously consider.</SPAN></FONT><FONT face=Arial size=2><SPAN
style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><?<U1:P></U1:P></SPAN></FONT><o:p></o:p></P>
<DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN
style="FONT-SIZE: 12pt"> <o:p></o:p></SPAN></FONT></P></DIV>
<DIV>
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN
style="FONT-SIZE: 12pt">jmr<o:p></o:p></SPAN></FONT></P></DIV>
<BLOCKQUOTE
style="BORDER-RIGHT: medium none; PADDING-RIGHT: 0in; BORDER-TOP: medium none; MARGIN-TOP: 5pt; PADDING-LEFT: 6pt; MARGIN-BOTTOM: 5pt; PADDING-BOTTOM: 0in; MARGIN-LEFT: 6pt; BORDER-LEFT: blue 1.5pt solid; PADDING-TOP: 0in; BORDER-BOTTOM: medium none">
<P class=MsoNormal><FONT face="Times New Roman" size=3><SPAN
style="FONT-SIZE: 12pt"><BR>-------- Original Message --------<BR>Subject: RE:
802.1x<BR>From: "Alex M" <alexm@lrcommunications.net><BR>Date: Wed,
November 02, 2005 9:10 am<BR>To: "'FreeRadius users mailing
list'"<BR><freeradius-users@lists.freeradius.org><BR><BR>Now im totally
lost...<BR>Can u give me an example what 802.1x
does?<BR><BR><BR><BR><BR><BR>-----Original Message-----<BR>From:
freeradius-users-bounces@lists.freeradius.org<BR>[mailto:freeradius-users-bounces@lists.freeradius.org]
On Behalf Of Alan<BR>DeKok<BR>Sent: Wednesday, November 02, 2005 11:04
AM<BR>To: FreeRadius users mailing list<BR>Subject: Re: 802.1x <BR><BR>"Alex
M" <alexm@lrcommunications.net> wrote:<BR>> So then such features as
bandwidth and port blocking could be controlled<BR>via<BR>>
802.1x?<BR><BR> No.<BR><BR> Alan DeKok.<BR>- <BR>List
info/subscribe/unsubscribe?
See<BR>http://www.freeradius.org/list/users.html<BR><BR>- <BR>List
info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
<o:p></o:p></SPAN></FONT></P></BLOCKQUOTE></DIV></BODY><!--[object_id=#telindus.co.uk#]--><FONT face=Tahoma size=2><FONT color=#0000ff><FONT size=2>
<P>This e-mail is private and may be confidential and is for the intended recipient only. If misdirected, please notify us by telephone and confirm that it has been deleted from your system and any copies destroyed. If you are not the intended recipient you are strictly prohibited from using, printing, copying, distributing or disseminating this e-mail or any information contained in it. We use reasonable endeavours to virus scan all e-mails leaving the Company but no warranty is given that this e-mail and any attachments are virus free. You should undertake your own virus checking. The right to monitor e-mail communications through our network is reserved by us. </P></FONT></FONT></FONT></HTML>