[crossbow-discuss] DLPI and non IP frames

[James Carlson]

Jason King writes:
> On Thu, Mar 12, 2009 at 7:02 AM, James Carlson <james.d.carlson at sun.com> wrote:
> > I suppose it's possible to do this, but I'm not sure how viable that
> > design would be.  I think it'd be much better to provide a way to get
> > real per-port access.  You're going to need it anyway if you implement
> > an 802.1X authenticator.
> 
> Are there any plans afoot to implement 802.1x?

It's CR 5092062.  There's been a fair amount of interest in it
(including from our own IT department), and I know we've internally
discussed plans to launch a project, but I don't know the current
state of things.

I'd like to see us have a nice generic implementation that works on
all interfaces, rather than something wired into just 802.11.  (And in
terms of priority, I'd expect that supplicant would come first.
Authenticator is harder, as doing a good job on that means connecting
into AAA, and Solaris just doesn't have _any_ AAA infrastructure.)

-- 
James Carlson, Solaris Networking              <james.d.carlson at sun.com>
Sun Microsystems / 35 Network Drive        71.232W   Vox +1 781 442 2084
MS UBUR02-212 / Burlington MA 01803-2757   42.496N   Fax +1 781 442 1677