https://ja.wikipedia.org/wiki/RADIUS

「このページは著作権侵害のおそれが指摘されており、事実関係の調査が依頼されています。」

転載元はよく知らない。 IETFのRFC(request for commnet)だけからの理解をするために、まずRFCを読む

読む目的によって、全部読むか、全部に加えてそれぞれのRFCで参照しているRFCも全部読むか、現在有効な文書だけ読むか、現在重要な文書だけ読むかの4種類を想定

重要な文書だけ読む

RADIUSの著名な書籍を読み、その参考文献、引用しているRFCだけ読む。

この方法だと、今回の目的のうち、RFCだけから理解するという作業にならなくなってしまう。

現在有効な文書だけ読む

下記検索結果からObsolatedとなっているもの以外を読む。

ここから始める。

まず、表題にRADIUSの文字があるものだけ最初に読む(1)。

RFC editor search

https://www.rfc-editor.org/search/rfc_search.php

読んだものからURLをつける。

少し作業を進めてみると、

RFC2865,2866, 2867, 2868, 2869の5文書が中核文書だと思ってもいいかもしれない。

もし、構造が変わるのであれば、前の文書をObsolateして、新しい文書番号をつけるはずだから。

（どんどん新しい文書にしていくものと、古い文書を大切にしてUpdateするものもあるかもしれず、かならずしも新番号がつかなければ中核とは限らないかもしれない。）

Radius RFCを全部読む

RFC Editor Searchで、Rasiusで検索した結果が下記。

他の通信規約の場合に、略称が全く出てこない文章もあったような気がする。

全部読む過程で、関連文書、変更文書などが、この一覧にないかを確認する。

Radius RFCで参照しているRFCも読む

ReferenceのRFCを理解していないと、本質的な事項がわからないかもしれない。

例えば、

[4] Postel, J., "User Datagram Protocol", STD 6, RFC 768, August 1980.

はTCPと共存する通信規約で重要である。TCPの上で動くか、UDPの上で動くかで、上の規約の特徴が生きるかどうかがかかっている本質的な参照と、部分的な調整上で参照しているRFCでは必読度が違うかもしれない。

今回は、参照通信規約の重み付けは行なっていない。（重要度を評価するほど理解していない）

Number
Title
Authors
Date
More Info
Status

2058
Remote Authentication Dial In User Service (RADIUS)
C. Rigney, A. Rubens, W. Simpson, S. Willens
January 1997
Obsoleted by RFC 2138
P.S.

2059
RADIUS Accounting
C. Rigney
January 1997
Obsoleted by RFC 2139
Inf.

2107
Ascend Tunnel Management Protocol - ATMP
K. Hamzeh
February 1997

Inf.

2138
Remote Authentication Dial In User Service (RADIUS)
C. Rigney, A. Rubens, W. Simpson, S. Willens
April 1997
Obsoletes RFC 2058, Obsoleted by RFC 2865
P.S.

2139
RADIUS Accounting
C. Rigney
April 1997
Obsoletes RFC 2059, Obsoleted by RFC 2866
Inf.

2548
Microsoft Vendor-specific RADIUS Attributes
G. Zorn
March 1999
Errata
Inf.

2607
Proxy Chaining and Policy Implementation in Roaming
B. Aboba, J. Vollbrecht
June 1999

Inf.

2618
RADIUS Authentication Client MIB
B. Aboba, G. Zorn
June 1999
Obsoleted by RFC 4668
P.S.

2619
RADIUS Authentication Server MIB
G. Zorn, B. Aboba
June 1999
Obsoleted by RFC 4669
P.S.

2620
RADIUS Accounting Client MIB
B. Aboba, G. Zorn
June 1999
Obsoleted by RFC 4670
Inf.

2621
RADIUS Accounting Server MIB
G. Zorn, B. Aboba
June 1999
Obsoleted by RFC 4671
Inf.

2809
Implementation of L2TP Compulsory Tunneling via RADIUS
B. Aboba, G. Zorn
April 2000

Inf.

2865
Remote Authentication Dial In User Service (RADIUS) https://www.rfc-editor.org/rfc/rfc2865.txt

C. Rigney, S. Willens, A. Rubens, W. Simpson
June 2000
Errata, Obsoletes RFC 2138, Updated by RFC 2868, RFC 3575, RFC 5080, RFC 6929, RFC 8044
D.S.

2866
RADIUS Accounting https://www.rfc-editor.org/rfc/rfc2866.txt

C. Rigney
June 2000
Errata, Obsoletes RFC 2139, Updated by RFC 2867, RFC 5080, RFC 5997
Inf.

2867
RADIUS Accounting Modifications for Tunnel Protocol Support https://www.rfc-editor.org/rfc/rfc2867.txt

G. Zorn, B. Aboba, D. Mitton
June 2000
Errata, Updates RFC 2866
Inf.

2868
RADIUS Attributes for Tunnel Protocol Support https://www.rfc-editor.org/rfc/rfc2868.txt

G. Zorn, D. Leifer, A. Rubens, J. Shriver, M. Holdrege, I. Goyret
June 2000
Errata, Updates RFC 2865, Updated by RFC 3575
Inf.

2869
RADIUS Extensions https://www.rfc-editor.org/rfc/rfc2869.txt

C. Rigney, W. Willats, P. Calhoun
June 2000
Updated by RFC 3579, RFC 5080
Inf.

2881
Network Access Server Requirements Next Generation (NASREQNG) NAS Model
D. Mitton, M. Beadles
July 2000

Inf.

2882
Network Access Servers Requirements: Extended RADIUS Practices
D. Mitton
July 2000

Inf.

3162
RADIUS and IPv6
B. Aboba, G. Zorn, D. Mitton
August 2001
Errata, Updated by RFC 8044
P.S.

3575
IANA Considerations for RADIUS (Remote Authentication Dial In User Service)
B. Aboba
July 2003
Errata, Updates RFC 2865, RFC 2868, Updated by RFC 6929
P.S.

3576
Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS)
M. Chiba, G. Dommety, M. Eklund, D. Mitton, B. Aboba
July 2003
Obsoleted by RFC 5176
Inf.

3579
RADIUS (Remote Authentication Dial In User Service) Support For Extensible Authentication Protocol (EAP)https://www.ietf.org/rfc/rfc3579.txt

B. Aboba, P. Calhoun
September 2003
Updates RFC 2869, Updated by RFC 5080
Inf.

3580
IEEE 802.1X Remote Authentication Dial In User Service (RADIUS) Usage Guidelines
P. Congdon, B. Aboba, A. Smith, G. Zorn, J. Roese
September 2003
Errata, Updated by RFC 7268
Inf.

4005
Diameter Network Access Server Application
P. Calhoun, G. Zorn, D. Spence, D. Mitton
August 2005
Errata, Obsoleted by RFC 7155
P.S.

4014
Remote Authentication Dial-In User Service (RADIUS) Attributes Suboption for the Dynamic Host Configuration Protocol (DHCP) Relay Agent Information Option
R. Droms, J. Schnizlein
February 2005

P.S.

4372
Chargeable User Identity
F. Adrangi, A. Lior, J. Korhonen, J. Loughney
January 2006

P.S.

4590
RADIUS Extension for Digest Authentication
B. Sterman, D. Sadolevsky, D. Schwartz, D. Williams, W. Beck
July 2006
Errata, Obsoleted by RFC 5090
P.S.

4603
Additional Values for the NAS-Port-Type Attribute
G. Zorn, G. Weber, R. Foltak
July 2006

Inf.

4668
RADIUS Authentication Client MIB for IPv6
D. Nelson
August 2006
Errata, Obsoletes RFC 2618
P.S.

4669
RADIUS Authentication Server MIB for IPv6
D. Nelson
August 2006
Errata, Obsoletes RFC 2619
P.S.

4670
RADIUS Accounting Client MIB for IPv6
D. Nelson
August 2006
Errata, Obsoletes RFC 2620
Inf.

4671
RADIUS Accounting Server MIB for IPv6
D. Nelson
August 2006
Errata, Obsoletes RFC 2621
Inf.

4672
RADIUS Dynamic Authorization Client MIB
S. De Cnodder, N. Jonnala, M. Chiba
September 2006
Errata
Inf.

4673
RADIUS Dynamic Authorization Server MIB
S. De Cnodder, N. Jonnala, M. Chiba
September 2006
Errata
Inf.

4675
RADIUS Attributes for Virtual LAN and Priority Support
P. Congdon, M. Sanchez, B. Aboba
September 2006
Errata
P.S.

4679
DSL Forum Vendor-Specific RADIUS Attributes
V. Mammoliti, G. Zorn, P. Arberg, R. Rennison
September 2006
Errata
Inf.

4818
RADIUS Delegated-IPv6-Prefix Attribute
J. Salowey, R. Droms
April 2007

P.S.

4849
RADIUS Filter Rule Attribute
P. Congdon, M. Sanchez, B. Aboba
April 2007

P.S.

5030
Mobile IPv4 RADIUS Requirements
M. Nakhjiri, Ed., K. Chowdhury, A. Lior, K. Leung
October 2007

Inf.

5080
Common Remote Authentication Dial In User Service (RADIUS) Implementation Issues and Suggested Fixes
D. Nelson, A. DeKok
December 2007
Errata, Updates RFC 2865, RFC 2866, RFC 2869, RFC 3579
P.S.

5090
RADIUS Extension for Digest Authentication
B. Sterman, D. Sadolevsky, D. Schwartz, D. Williams, W. Beck
February 2008
Errata, Obsoletes RFC 4590
P.S.

5176
Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS)
M. Chiba, G. Dommety, M. Eklund, D. Mitton, B. Aboba
January 2008
Errata, Obsoletes RFC 3576
Inf.

5580
Carrying Location Objects in RADIUS and Diameter
H. Tschofenig, Ed., F. Adrangi, M. Jones, A. Lior, B. Aboba
August 2009
Errata
P.S.

5607
Remote Authentication Dial-In User Service (RADIUS) Authorization for Network Access Server (NAS) Management
D. Nelson, G. Weber
July 2009

P.S.

5608
Remote Authentication Dial-In User Service (RADIUS) Usage for Simple Network Management Protocol (SNMP) Transport Models
K. Narayan, D. Nelson
August 2009
Errata
P.S.

5904
RADIUS Attributes for IEEE 802.16 Privacy Key Management Version 1 (PKMv1) Protocol Support
G. Zorn
June 2010

Inf.

5997
Use of Status-Server Packets in the Remote Authentication Dial In User Service (RADIUS) Protocol
A. DeKok
August 2010
Errata, Updates RFC 2866
Inf.

6065
Using Authentication, Authorization, and Accounting Services to Dynamically Provision View-Based Access Control Model User-to-Group Mappings
K. Narayan, D. Nelson, R. Presuhn, Ed.
December 2010

P.S.

6158 a.k.a. BCP 158
RADIUS Design Guidelines
A. DeKok, Ed., G. Weber
March 2011
Updated by RFC 6929, RFC 8044
B.C.P.

6218
Cisco Vendor-Specific RADIUS Attributes for the Delivery of Keying Material
G. Zorn, T. Zhang, J. Walker, J. Salowey
April 2011
Errata
Inf.

6421
Crypto-Agility Requirements for Remote Authentication Dial-In User Service (RADIUS)
D. Nelson, Ed.
November 2011

Inf.

6519
RADIUS Extensions for Dual-Stack Lite
R. Maglione, A. Durand
February 2012
Errata
P.S.

6572
RADIUS Support for Proxy Mobile IPv6
F. Xia, B. Sarikaya, J. Korhonen, Ed., S. Gundavelli, D. Damic
June 2012
Updated by RFC 8044
P.S.

6613
RADIUS over TCP
A. DeKok
May 2012
Updated by RFC 7930
Exp.

6614
Transport Layer Security (TLS) Encryption for RADIUS
S. Winter, M. McCauley, S. Venaas, K. Wierenga
May 2012

Exp.

6911
RADIUS Attributes for IPv6 Access Networks
W. Dec, Ed., B. Sarikaya, G. Zorn, Ed., D. Miles, B. Lourdelet
April 2013

P.S.

6929
Remote Authentication Dial In User Service (RADIUS) Protocol Extensions
A. DeKok, A. Lior
April 2013
Updates RFC 2865, RFC 3575, RFC 6158
P.S.

6930
RADIUS Attribute for IPv6 Rapid Deployment on IPv4 Infrastructures (6rd)
D. Guo, S. Jiang, Ed., R. Despres, R. Maglione
April 2013
Errata
P.S.

7037
RADIUS Option for the DHCPv6 Relay Agent
L. Yeh, M. Boucadair
October 2013

P.S.

7268
RADIUS Attributes for IEEE 802 Networks
B. Aboba, J. Malinen, P. Congdon, J. Salowey, M. Jones
July 2014
Updates RFC 3580, RFC 4072, Updated by RFC 8044
P.S.

7360
Datagram Transport Layer Security (DTLS) as a Transport Layer for RADIUS
A. DeKok
September 2014

Exp.

7499
Support of Fragmentation of RADIUS Packets
A. Perez-Mendez, Ed., R. Marin-Lopez, F. Pereniguez-Garcia, G. Lopez-Millan, D. Lopez, A. DeKok
April 2015

Exp.

7585
Dynamic Peer Discovery for RADIUS/TLS and RADIUS/DTLS Based on the Network Access Identifier (NAI)
S. Winter, M. McCauley
October 2015
Errata
Exp.

7593
The eduroam Architecture for Network Roaming
K. Wierenga, S. Winter, T. Wolniewicz
September 2015
Errata
Inf.

7831
Application Bridging for Federated Access Beyond Web (ABFAB) Architecture
J. Howlett, S. Hartman, H. Tschofenig, J. Schaad
May 2016

Inf.

7832
Application Bridging for Federated Access Beyond Web (ABFAB) Use Cases
R. Smith, Ed.
May 2016

Inf.

7833
A RADIUS Attribute, Binding, Profiles, Name Identifier Format, and Confirmation Methods for the Security Assertion Markup Language (SAML)
J. Howlett, S. Hartman, A. Perez-Mendez, Ed.
May 2016

P.S.

7930
Larger Packets for RADIUS over TCP
S. Hartman
August 2016
Updates RFC 6613
Exp.

8044
Data Types in RADIUS
A. DeKok
January 2017
Updates RFC 2865, RFC 3162, RFC 4072, RFC 6158, RFC 6572, RFC 7268
P.S.

8045
RADIUS Extensions for IP Port Configuration and Reporting
D. Cheng, J. Korhonen, M. Boucadair, S. Sivakumar
January 2017
Errata
P.S.

Best Current Practice: B.C.P.

Draft Standard: D.S.

Experimental: Exp.

Informational: Inf.

Proposed Standard: P.S.

RFC 2865

Remote Authentication Dial In User Service (RADIUS) https://www.rfc-editor.org/rfc/rfc2865.txt C. Rigney, S. Willens, A. Rubens, W. Simpson June 2000 Errata, Obsoletes RFC 2138, Updated by RFC 2868, RFC 3575, RFC 5080, RFC 6929, RFC 8044 Draft Standard

References

[1] Rigney, C., Rubens, A., Simpson, W. and S. Willens, "Remote Authentication Dial In User Service (RADIUS)", RFC 2138, April 1997.

[2] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March, 1997.

[3] Rivest, R. and S. Dusse, "The MD5 Message-Digest Algorithm", RFC 1321, April 1992.

[4] Postel, J., "User Datagram Protocol", STD 6, RFC 768, August 1980.

[5] Rigney, C., "RADIUS Accounting", RFC 2866, June 2000.

[6] Reynolds, J. and J. Postel, "Assigned Numbers", STD 2, RFC 1700, October 1994.

[7] Yergeau, F., "UTF-8, a transformation format of ISO 10646", RFC 2279, January 1998.

[8] Aboba, B. and M. Beadles, "The Network Access Identifier", RFC 2486, January 1999.

[9] Kaufman, C., Perlman, R., and Speciner, M., "Network Security: Private Communications in a Public World", Prentice Hall, March 1995, ISBN 0-13-061466-1.

[10] Jacobson, V., "Compressing TCP/IP headers for low-speed serial links", RFC 1144, February 1990.

[11] ISO 8859. International Standard -- Information Processing -- 8-bit Single-Byte Coded Graphic Character Sets -- Part 1: Latin Alphabet No. 1, ISO 8859-1:1987.

[12] Sklower, K., Lloyd, B., McGregor, G., Carr, D. and T. Coradetti, "The PPP Multilink Protocol (MP)", RFC 1990, August 1996.

[13] Alvestrand, H. and T. Narten, "Guidelines for Writing an IANA Considerations Section in RFCs", BCP 26, RFC 2434, October 1998.

[14] Galvin, J., McCloghrie, K. and J. Davin, "SNMP Security Protocols", RFC 1352, July 1992.

[15] Dobbertin, H., "The Status of MD5 After a Recent Attack", CryptoBytes Vol.2 No.2, Summer 1996.

RFC 2866

RFC 2866 RADIUS Accounting https://www.rfc-editor.org/rfc/rfc2866.txt C. Rigney June 2000Errata, Obsoletes RFC 2139, Updated by RFC 2867, RFC 5080, RFC 5997 Informational

References

[1] Rigney, C., "RADIUS Accounting", RFC 2139, April 1997.

[2] Rigney, C., Willens, S., Rubens, A. and W. Simpson, "Remote Authentication Dial In User Service (RADIUS)", RFC 2865, June 2000.

[3] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March, 1997.

[4] Postel, J., "User Datagram Protocol", STD 6, RFC 768, August 1980.

[5] Rivest, R. and S. Dusse, "The MD5 Message-Digest Algorithm", RFC1321, April 1992.

[6] Reynolds, J. and J. Postel, "Assigned Numbers", STD 2, RFC 1700, October 1994.

[7] Yergeau, F., "UTF-8, a transformation format of ISO 10646", RFC2279, January 1998.

[8] Alvestrand, H. and T. Narten, "Guidelines for Writing an IANA Considerations Section in RFCs", BCP 26, RFC 2434, October 1998.

RFC 2867

RFC 2867 RADIUS Accounting Modifications for Tunnel Protocol Supporthttps://www.rfc-editor.org/rfc/rfc2867.txt G. Zorn, B. Aboba, D. Mitton June 2000 Errata, Updates RFC 2866 Inf.

References

[1] Rigney, C., "RADIUS Accounting", RFC 2866, June 2000.

[2] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997.

[3] Zorn, G., Leifer, D., Rubens, A., Shriver, J., Holdrege, M. and I. Goyret, "RADIUS Attributes for Tunnel Protocol Support", RFC 2868, June 2000.

[4] Townsley, W., Valencia, A., Rubens, A., Pall, G., Zorn, G. and B. Palter, "Layer Two Tunneling Protocol "L2TP"", RFC 2661, August 1999.

[5] Hamzeh, K., Pall, G., Verthein, W., Taarud, J., Little, W. and G. Zorn, "Point-to-Point Tunneling Protocol (PPTP)", RFC 2637, July 1999.

RFC 2868

RFC2868 RADIUS Attributes for Tunnel Protocol Support https://www.rfc-editor.org/rfc/rfc2868.txt| G. Zorn, D. Leifer, A. Rubens, J. Shriver, M. Holdrege, I. Goyret June 2000 Errata, Updates RFC 2865, Updated by RFC 3575 Inf.

References

[1] Hamzeh, K., Pall, G., Verthein, W., Taarud, J., Little, W. and G. Zorn, "Point-to-Point Tunneling Protocol (PPTP)", RFC 2637, July 1999.

[2] Valencia, A., Littlewood, M. and T. Kolar, T., "Cisco Layer Two Forwarding (Protocol) 'L2F'", RFC 2341, May 1998.

[3] Townsley, W., Valencia, A., Rubens, A., Pall, G., Zorn, G. and B. Palter, "Layer Two Tunnelling Protocol (L2TP)", RFC 2661, August 1999.

[4] Hamzeh, K., "Ascend Tunnel Management Protocol - ATMP", RFC 2107, February 1997.

[5] Kent, S. and R. Atkinson, "Security Architecture for the Internet Protocol", RFC 2401, November 1998.

[6] Perkins, C., "IP Encapsulation within IP", RFC 2003, October 1996.

[7] Perkins, C., "Minimal Encapsulation within IP", RFC 2004, October 1996.

[8] Atkinson, R., "IP Encapsulating Security Payload (ESP)", RFC 1827, August 1995.

[9] Hanks, S., Li, T., Farinacci, D. and P. Traina, "Generic Routing Encapsulation (GRE)", RFC 1701, October 1994.

[10] Simpson, W., "IP in IP Tunneling", RFC 1853, October 1995.

[11] Zorn, G. and D. Mitton, "RADIUS Accounting Modifications for Tunnel Protocol Support", RFC 2867, June 2000.

[12] Rigney, C., Willens, S., Rubens, A. and W. Simpson, "Remote Authentication Dial in User Service (RADIUS)", RFC 2865, June 2000.

[13] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997.

[14] Reynolds, J. and J. Postel, "Assigned Numbers", STD 2, RFC 1700, October 1994.

[15] Rigney, C., Willats, W. and P. Calhoun, "RADIUS Extensions", RFC 2869, June 2000.

[16] Narten, T. and H. Alvestrand, "Guidelines for writing an IANA Considerations Section in RFCs", BCP 26, RFC 2434, October 1998.

[17] Hinden, R. and S. Deering, "IP Version 6 Addressing Architecture", RFC 2373, July 1998.

RFC2869

RFC2869 RADIUS Extensions https://www.rfc-editor.org/rfc/rfc2869.txt C. Rigney, W. Willats, P. Calhoun June 2000 Updated by RFC 3579, RFC 5080 Inf.

References

[1] Rigney, C., Willens, S., Rubens, A. and W. Simpson, "Remote Authentication Dial In User Service (RADIUS)", RFC 2865, June 2000.

[2] Rigney, C., "RADIUS Accounting", RFC 2866, June 2000.

[3] Blunk, L. and J. Vollbrecht, "PPP Extensible Authentication Protocol (EAP)", RFC 2284, March 1998.

[4] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March, 1997.

[5] Reynolds, J. and J. Postel, "Assigned Numbers", STD 2, RFC 1700, October 1994.

[6] Zorn, G., Leifer, D., Rubens, A., Shriver, J., Holdrege, M. and I. Goyret, "RADIUS Attributes for Tunnel Protocol Support", RFC 2868, June 2000.

[7] Zorn, G., Aboba, B. and D. Mitton, "RADIUS Accounting Modifications for Tunnel Protocol Support", RFC 2867, June 2000.

[8] Yergeau, F., "UTF-8, a transformation format of ISO 10646", RFC 2279, January 1998.

[9] Krawczyk, H., Bellare, M. and R. Canetti, "HMAC: Keyed-Hashing for Message Authentication", RFC 2104, February 1997.

[10] Alvestrand, H. and T. Narten, "Guidelines for Writing an IANA Considerations Section in RFCs", BCP 26, RFC 2434, October 1998.

[11] Slatalla, M., and Quittner, J., "Masters of Deception." HarperCollins, New York, 1995.

RFC3579

RFC3579 RADIUS (Remote Authentication Dial In User Service) Support For Extensible Authentication Protocol (EAP)https://www.ietf.org/rfc/rfc3579.txt B. Aboba, P. Calhoun September 2003, Updates RFC 2869, Updated by RFC 5080, Inf.

References

6.1. Normative References

[RFC1321] Rivest, R., "The MD5 Message-Digest Algorithm", RFC 1321, April 1992.

[RFC2104] Krawczyk, H., Bellare, M. and R. Canetti, "HMAC: Keyed-Hashing for Message Authentication", RFC 2104, February 1997.

[RFC2119] Bradner, S., "Key words for use in RFCs to Indicate Requirement Levels", BCP 14, RFC 2119, March 1997.

[RFC2279] Yergeau, F., "UTF-8, a transformation format of ISO 10646", RFC 2279, January 1998.

[RFC2284] Blunk, L. and J. Vollbrecht, "PPP Extensible Authentication Protocol (EAP)", RFC 2284, March 1998.

[RFC2401] Atkinson, R. and S. Kent, "Security Architecture for the Internet Protocol", RFC 2401, November 1998.

[RFC2406] Kent, S. and R. Atkinson, "IP Encapsulating Security Payload (ESP)", RFC 2406, November 1998.

[RFC2409] Harkins, D. and D. Carrel, "The Internet Key Exchange (IKE)", RFC 2409, November 1998.

[RFC2486] Aboba, B. and M. Beadles, "The Network Access Identifier", RFC 2486, January 1999.

[RFC2865] Rigney, C., Willens, S., Rubens, A. and W. Simpson, "Remote Authentication Dial In User Service (RADIUS)", RFC 2865, June 2000.

[RFC2988] Paxson, V. and M. Allman, "Computing TCP's Retransmission Timer", RFC 2988, November 2000.

[RFC3162] Aboba, B., Zorn, G. and D. Mitton, "RADIUS and IP6", RFC 3162, August 2001.

[RFC3280] Housley, R., Polk, W., Ford, W. and D. Solo, "Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile", RFC 3280, April 2002.

[RFC3576] Chiba, M., Dommety, G., Eklund, M., Mitton, D. and B. Aboba, "Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS)", RFC 3576, July 2003.

6.2. Informative References

[RFC826] Plummer, D., "An Ethernet Address Resolution Protocol", STD 37, RFC 826, November 1982.

[RFC1510] Kohl, J. and C. Neuman, "The Kerberos Network Authentication Service (V5)", RFC 1510, September 1993.

[RFC1661] Simpson, W., "The Point-to-Point Protocol (PPP)", STD 51, RFC 1661, July 1994.

[RFC2548] Zorn, G., "Microsoft Vendor-specific RADIUS Attributes", RFC 2548, March 1999.

[RFC2607] Aboba, B. and J. Vollbrecht, "Proxy Chaining and Policy Implementation in Roaming", RFC 2607, June 1999.

[RFC2716] Aboba, B. and D. Simon,"PPP EAP TLS Authentication Protocol", RFC 2716, October 1999.

[RFC2866] Rigney, C., "RADIUS Accounting", RFC 2866, June 2000.

[RFC2867] Zorn, G., Aboba, B. and D. Mitton, "RADIUS Accounting Modifications for Tunnel Protocol Support", RFC 2867, June 2000.

[RFC2868] Zorn, G., Leifer, D., Rubens, A., Shriver, J., Holdrege, M. and I. Goyret, "RADIUS Attributes for Tunnel Protocol Support", RFC 2868, June 2000.

[RFC2869] Rigney, C., Willats, W. and P. Calhoun, "RADIUS Extensions", RFC 2869, June 2000.

[RFC2983] Black, D. "Differentiated Services and Tunnels", RFC 2983, October 2000.

[RFC3580] Congdon, P., Aboba, B., Smith, A., Zorn, G. and J. Roese, "IEEE 802.1X Remote Authentication Dial In User Service (RADIUS) Usage Guidelines", RFC 3580, September 2003.

[IEEE802] IEEE Standards for Local and Metropolitan Area Networks: Overview and Architecture, ANSI/IEEE Std 802, 1990.

[IEEE8021X] IEEE Standards for Local and Metropolitan Area Networks: Port based Network Access Control, IEEE Std 802.1X-2001, June 2001.

[MD5Attack] Dobbertin, H., "The Status of MD5 After a Recent Attack", CryptoBytes Vol.2 No.2, Summer 1996.

[Masters] Slatalla, M. and J. Quittner, "Masters of Deception." HarperCollins, New York, 1995.

[NASREQ] Calhoun, P., et al., "Diameter Network Access Server Application", Work in Progress.

用語(term)

RFC3579

authenticator

         The end of the link requiring the authentication.  Also

         known as the Network Access Server (NAS) or RADIUS client.

         Within IEEE 802.1X terminology, the term Authenticator is

         used.

peer

  The other end of the point-to-point link (PPP),

         point-to-point LAN segment (IEEE 802.1X) or wireless link,

         which is being authenticated by the authenticator.  In IEEE

         802.1X, this end is known as the Supplicant.

authentication server

         An authentication server is an entity that provides an

         authentication service to an authenticator (NAS).  This

         service verifies from the credentials provided by the peer,

         the claim of identity made by the peer; it also may provide

         credentials allowing the peer to verify the identity of the

         authentication server.  Within this document it is assumed

         that the NAS operates as a pass-through, forwarding EAP

         packets between the RADIUS server and the EAP peer.

         Therefore the RADIUS server operates as an authentication

         server.

displayable message

         This is interpreted to be a human readable string of

         characters, and MUST NOT affect operation of the protocol.

         The message encoding MUST follow the UTF-8 transformation

         format [RFC2279].

Network Access Server (NAS)

         The device providing access to the network.  Also known as

         the Authenticator (IEEE 802.1X or EAP terminology) or

         RADIUS client.

RFC2865, RFC2866, RFC2869

service

       The NAS provides a service to the dial-in user, such as PPP

         or Telnet.

RFC3579

service

      The NAS provides a service to the user, such as IEEE 802 or

         PPP.

RFC2865

session

        Each service provided by the NAS to a dial-in user

         constitutes a session, with the beginning of the session

         defined as the point where service is first provided and

         the end of the session defined as the point where service

         is ended.  A user may have multiple sessions in parallel or

         series if the NAS supports that.

RFC2866

session

        Each service provided by the NAS to a dial-in user

         constitutes a session, with the beginning of the session

         defined as the point where service is first provided and

         the end of the session defined as the point where service

         is ended.  A user may have multiple sessions in parallel or

         series if the NAS supports that, with each session

         generating a separate start and stop accounting record with

         its own Acct-Session-Id.

RFC2869

session

        Each service provided by the NAS to a dial-in user

         constitutes a session, with the beginning of the session

         defined as the point where service is first provided and

         the end of the session defined as the point where service

         is ended.  A user may have multiple sessions in parallel or

         series if the NAS supports that, with each session

         generating a separate start and stop accounting record.             

RFC3579

session

        Each service provided by the NAS to a peer constitutes a

         session, with the beginning of the session defined as the

         point where service is first provided and the end of the

         session defined as the point where service is ended.  A

         peer may have multiple sessions in parallel or series if

         the NAS supports that, with each session generating a

         separate start and stop accounting record.

RFC2865, RFC2866, 2869, RFC3579

silently discard

         This means the implementation discards the packet without

         further processing.  The implementation SHOULD provide the

         capability of logging the error, including the contents of

         the silently discarded packet, and SHOULD record the event

         in a statistics counter.

RFC文書の参照関係

RFC
obsolate
updates
updated
reference
title

2865
2138

2138
Remote Authentication Dial In User Service (RADIUS)

2119
Key words for use in RFCs to Indicate Requirement Levels

1321
The MD5 Message-Digest Algorithm

768
User Datagram Protocol

2866
RADIUS Accounting

1700
Assigned Numbers

2279
UTF-8, a transformation format of ISO 10646

2486
The Network Access Identifier

1144
Compressing TCP/IP headers for low-speed serial links

1990
The PPP Multilink Protocol (MP)

2434
Guidelines for Writing an IANA Considerations Section in RFCs

1352
SNMP Security Protocols

2868

RADIUS Attributes for Tunnel Protocol Support

3575

IANA Considerations for RADIUS (Remote Authentication Dial In User Service)

5080

Common Remote Authentication Dial In User Service (RADIUS) Implementation Issues and Suggested Fixes

6929

Remote Authentication Dial In User Service (RADIUS) Protocol Extensions

8044

Data Types in RADIUS

2866
2139

2139
RADIUS Accounting

2865
Remote Authentication Dial In User Service (RADIUS)

2119
Key words for use in RFCs to Indicate Requirement Levels

768
User Datagram Protocol

1321
The MD5 Message-Digest Algorithm

1700
Assigned Numbers

2279
UTF-8, a transformation format of ISO 10646

2434
Guidelines for Writing an IANA Considerations Section in RFCs

2867

RADIUS Accounting Modifications for Tunnel Protocol Support

5080

Common Remote Authentication Dial In User Service (RADIUS) Implementation Issues and Suggested Fixes

5997

Use of Status-Server Packets in the Remote Authentication Dial In User Service (RADIUS) Protocol

2867

2866

2866
RADIUS Accounting

2119
Key words for use in RFCs to Indicate Requirement Levels

2868
RADIUS Attributes for Tunnel Protocol Support

2661
Layer Two Tunneling Protocol "L2TP"

2637
Point-to-Point Tunneling Protocol (PPTP)

2868

2865

Remote Authentication Dial In User Service (RADIUS)

3575

IANA Considerations for RADIUS (Remote Authentication Dial In User Service)

2637
Point-to-Point Tunneling Protocol (PPTP)

2341
Cisco Layer Two Forwarding (Protocol) 'L2F

2661
Layer Two Tunneling Protocol "L2TP"

2107
Ascend Tunnel Management Protocol - ATMP

2401
Security Architecture for the Internet Protocol

2001
IP Encapsulation within IP

2004
Minimal Encapsulation within IP

1827
IP Encapsulating Security Payload (ESP)

1701
Generic Routing Encapsulation (GRE)

1853
IP in IP Tunneling

2867
RADIUS Accounting Modifications for Tunnel Protocol Support

2865
Remote Authentication Dial in User Service (RADIUS)

2119
Key words for use in RFCs to Indicate Requirement Levels

1700
Assigned Numbers

2869
RADIUS Extensions"

2434
Guidelines for Writing an IANA Considerations Section in RFCs

2373
IP Version 6 Addressing Architecture

2869

3579

5080

Common Remote Authentication Dial In User Service (RADIUS) Implementation Issues and Suggested Fixes

2865
Remote Authentication Dial in User Service (RADIUS)

2866
RADIUS Accounting

2284
PPP Extensible Authentication Protocol (EAP)

2119
Key words for use in RFCs to Indicate Requirement Levels

1700
Assigned Numbers

2868
RADIUS Attributes for Tunnel Protocol Support

2867
RADIUS Accounting Modifications for Tunnel Protocol Support

2279
UTF-8, a transformation format of ISO 10646

2104
HMAC: Keyed-Hashing for Message Authentication"

2434
Guidelines for Writing an IANA Considerations Section in RFCs

3579

2869

RADIUS Extensions

1321
The MD5 Message-Digest Algorithm

2104
HMAC: Keyed-Hashing for Message Authentication

2119
Key words for use in RFCs to Indicate Requirement Levels

2279
UTF-8, a transformation format of ISO 10646

2284
PPP Extensible Authentication Protocol (EAP)

2401
Security Architecture for the Internet Protocol

2406
IP Encapsulating Security Payload (ESP)

2409
The Internet Key Exchange (IKE)

2486
The Network Access Identifier

2865
Remote Authentication Dial In User Service (RADIUS)

2988
Computing TCP's Retransmission Timer

3162
RADIUS and IP6

3280
Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile

3576
Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS)

826
An Ethernet Address Resolution Protocol

1510
The Kerberos Network Authentication Service (V5)

1661
The Point-to-Point Protocol (PPP)

2548
Microsoft Vendor-specific RADIUS Attributes

2607
Proxy Chaining and Policy Implementation in Roaming

2716
PPP EAP TLS Authentication Protocol"

2866
RADIUS Accounting

2867
RADIUS Accounting Modifications for Tunnel Protocol Support

2868
RADIUS Attributes for Tunnel Protocol Support

2869
RADIUS Extensions

2983
Differentiated Services and Tunnels

3580
IEEE 802.1X Remote Authentication Dial In User Service (RADIUS) Usage Guidelines

文書履歴(document history)

ver. 0.01 初稿　５文書(RFC2865,2866, 2867, 2868, 2869)の参考文献、参照関係整理　20190211 午前　

ver. 0.02 RFC3579, 用語(term)追記　20190211 夕

ver. 0.03 表題追記 20190318