"Richard L. Goerwitz III" <[EMAIL PROTECTED]> wrote:
> All is well unless that RADIUS server is unavailable, times out, or has
> some other issue that renders it incapable of responding.  In that case,
> another request is issued to a secondary server.  This request goes out
> from the same source IP port, across the Sidewinder (which does its NAT
> thing), and eventually ends up at port 1645 on the secondary RADIUS
> server, where it apparently fails to verify at least in some cases.

  <shrug>  That's why RADIUS proxies (and UDP proxies in general) are
a bad idea.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to