RFC 6614: Transport Layer Security (TLS) Encryption for RADIUS

This document specifies a transport profile for RADIUS using Transport Layer Security (TLS) over TCP as the transport protocol. This enables dynamic trust…

Read RFC 6614 on the RFC Editor

Outgoing relationships (17 related RFCs)

Normative reference — RFC 2119: Key words for use in RFCs to Indicate Requirement Levels
Normative reference — RFC 5246: The Transport Layer Security (TLS) Protocol Version 1.2
Normative reference — RFC 5280: Internet X.509 Public Key Infrastructure Certificate and Certificate Revocation List (CRL) Profile
Normative reference — RFC 2865: Remote Authentication Dial In User Service (RADIUS)
Normative reference — RFC 6066: Transport Layer Security (TLS) Extensions: Extension Definitions
Normative reference — RFC 4279: Pre-Shared Key Ciphersuites for Transport Layer Security (TLS)
Normative reference — RFC 2866: RADIUS Accounting
Normative reference — RFC 5176: Dynamic Authorization Extensions to Remote Authentication Dial In User Service (RADIUS)
Normative reference — RFC 5247: Extensible Authentication Protocol (EAP) Key Management Framework
Normative reference — RFC 6613: RADIUS over TCP
Informative reference — RFC 4346: The Transport Layer Security (TLS) Protocol Version 1.1
Informative reference — RFC 6125: Representation and Verification of Domain-Based Application Service Identity within Internet Public Key Infrastructure Using X.509 (PKIX) Certificates in the Context of Transport Layer Security (TLS)
Informative reference — RFC 3588: Diameter Base Protocol
Informative reference — RFC 4107: Guidelines for Cryptographic Key Management
Informative reference — RFC 4953: Defending TCP Against Spoofing Attacks
Informative reference — RFC 3539: Authentication, Authorization and Accounting (AAA) Transport Profile
Informative reference — RFC 6421: Crypto-Agility Requirements for Remote Authentication Dial-In User Service (RADIUS)

Incoming relationships (16 related RFCs)

Updated by, Informatively referenced by — RFC 8996: Deprecating TLS 1.0 and TLS 1.1
Updated by, Normatively referenced by — RFC 9765: RADIUS/1.1: Leveraging Application-Layer Protocol Negotiation (ALPN) to Remove MD5
Normatively referenced by — RFC 6613: RADIUS over TCP
Normatively referenced by — RFC 7585: Dynamic Peer Discovery for RADIUS/TLS and RADIUS/DTLS Based on the Network Access Identifier (NAI)
Normatively referenced by — RFC 7360: Datagram Transport Layer Security (DTLS) as a Transport Layer for RADIUS
Normatively referenced by — RFC 7593: The eduroam Architecture for Network Roaming
Normatively referenced by — RFC 8242: Interface to the Routing System (I2RS) Ephemeral State Requirements
Normatively referenced by — RFC 7833: A RADIUS Attribute, Binding, Profiles, Name Identifier Format, and Confirmation Methods for the Security Assertion Markup Language (SAML)
Normatively referenced by — RFC 9813: Operational Considerations for Using TLS Pre-Shared Keys (TLS-PSKs) with RADIUS
Informatively referenced by — RFC 6632: An Overview of the IETF Network Management Standards
Informatively referenced by — RFC 9257: Guidance for External Pre-Shared Key (PSK) Usage in TLS
Informatively referenced by — RFC 6911: RADIUS Attributes for IPv6 Access Networks
Informatively referenced by — RFC 7831: Application Bridging for Federated Access Beyond Web (ABFAB) Architecture
Informatively referenced by — RFC 8241: Interface to the Routing System (I2RS) Security-Related Requirements
Informatively referenced by — RFC 9797: Randomized and Changing Media Access Control (MAC) Addresses: Context, Network Impacts, and Use Cases
Informatively referenced by — RFC 7256: Multicast Control Extensions for the Access Node Control Protocol (ANCP)