WLAN%20Attributes

1
WLAN Attributes

• Tuesday, November 7, 2006
• Draft-aboba-radext-wlan-03.txt
• Bernard Aboba
• IETF 67, San Diego, California

2
Attributes

• RADIUS attributes already defined in RFC 4072
• EAP-Key-Name (102)
• Included only for completeness
• Attributes for use with 802.11i
• SSID
• Preauth-Timeout
• Allowed-SSID
• Allowed-Called-Station-Id
• Attributes for use with IEEE 802.11r
• Mobility-Domain-ID
• Attributes defined in draft-ietf-eap-keying
• EAP-Peer-ID
• EAP-Server-ID

3
Pre-Authentication Support

• SSID attribute
• RFC 3580 Called-Station-Id attribute contains
  both the AP BSSID and the SSID (not widely
  implemented)
• Helpful to include the SSID in the
  Accounting-Request (SSID not known in a
  Pre-authentication Access-Request)
• Preauth-Timeout attribute
• Allows an AP to indicate that an Access-Request
  represents a pre-authentication attempt
• APs may not include the SSID within the
  Called-Station-Id attribute
• Enables pre-authentication caching to be
  controlled by the RADIUS server independent of
  Session-Timeout attribute
• Network administrator want to cache keys only for
  10 minutes while allowing a maximum session time
  of two hours.

4
Next Steps

• Should this become a WG work item?

5
Feedback?