On Mon, Feb 25, 2002 at 07:28:46PM +0100, Daniel Beuchler wrote:
> If your are doing IPsec with PPTP or L2TP Tunneling
> the IPsec tunnel will protect the PAP Passwords
> because IPsec encryption wraps round the L2TP/PPTP Tunnel and with
> it encrypts the passwords ... The Passwords will only be
> exchanged in plaintext between the NAS and your
> Radius (not bad if your LAN is switched for
> example ...)

A common misconception.  A switch provides essentially no security features
above a "hub", unless your device supports specific MAC access.

/fc

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to