半径的最大数据包大小
RADIUS 有最大数据包大小吗?我的一个应用程序需要发送签名的生物识别图像以进行身份验证,我不确定 Radius 是否能够处理它。
Does RADIUS have a maximum packet size? One of my applications will require a signed biometric image to be sent for authentication purposes and I am unsure of whether radius will be able to handle it.
如果你对这篇内容有疑问,欢迎到本站社区发帖提问 参与讨论,获取更多帮助,或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱,如果其他用户或者作者回复了您的评论,将不能在第一时间通知您!
发布评论
评论(3)
根据详细介绍 RADIUS 协议的 RFC 2865,虽然 Radius 数据包长度字段为 2 个八位字节长,但最大数据包大小限制为 4096 字节(其他人可能能够澄清其原因)。每个属性的长度字段为 1 个八位字节,因此属性限制为 255 个字节。
According to RFC 2865 that details the RADIUS protocol, although the Radius packet length field is 2 octets long, the maximum packet size is restricted to 4096 bytes (someone else may be able to clarify the reason for this). The length field per attribute is 1 octet and therefore attributes are limited to 255 bytes.
RFC7499 允许基于片段重组的大型数据包,即连接多个 RADIUS 数据包的内容。
并说明最初限制的理由是:
新的限制并不是绝对的。 RFC7499 建议最多 25 次往返,并且数据包应限制为网络 PMTU。
RFC7499 allows for large packets based on fragment reassembly, that is concatenating the contents of multiple RADIUS packets.
and states the rationale for the original limit as being:
The new limit isn't absolute. RFC7499 suggests that 25 roundtrips should be the maximum, and that packets should be limited to the network PMTU.
您可以在长度为 16 个八位位组 (65k) 的验证器部分中传递此信息。
You can pass this information in the authenticator section wich is 16 octets (65k) long.