{
  "number": 10065,
  "title": "A YANG Data Model and RADIUS Extension for Policy-Based Network Access Control",
  "authors": [
    "Q. Ma, Ed.",
    "Q. Wu",
    "M. Boucadair, Ed.",
    "D. King"
  ],
  "published": "2026-10",
  "status": "Proposed Standard",
  "stream": "IETF",
  "area": "ops",
  "working_group": "opsawg",
  "pages": 37,
  "formats": [
    "HTML",
    "TXT",
    "PDF",
    "XML"
  ],
  "abstract": "This document defines a YANG data model for policy-based network access control, which enables enforcement of network access control policies based on group identity. This YANG data model extends Access Control Lists (ACLs) with date and time parameters to support schedule-aware policy enforcement.\n\nSpecifically in scenarios where network access is triggered by user authentication, this document defines a mechanism that eases the maintenance of the mapping between a user group identifier and a set of packet header fields to enforce policy-based network access control. Moreover, this document defines a Remote Authentication Dial-in User Service (RADIUS) attribute that is used to communicate the user group identifier as part of identification and authorization information.",
  "keywords": [
    "ACL",
    "BYOD",
    "Access control",
    "Policy Enforcement Point",
    "PEP",
    "Policy enforcement",
    "Policy Decision Point",
    "PDP",
    "Network Management",
    "Service Provisioning",
    "Group-Based Policy",
    "GBP",
    "Software-Defined Networking",
    "SDN"
  ],
  "draft": "draft-ietf-opsawg-ucl-acl-15",
  "doi": "10.17487/RFC10065",
  "urls": {
    "html": "https://rfc.dk/rfc10065/",
    "text": "https://rfc.dk/rfc10065.txt",
    "rfc_editor": "https://www.rfc-editor.org/rfc/rfc10065",
    "datatracker": "https://datatracker.ietf.org/doc/rfc10065/"
  },
  "text_modified": "2026-10-08T00:45:26.071083723Z"
}