On Fri, 4 Apr 2003, Alan DeKok wrote: > Brian Pavane <[EMAIL PROTECTED]> wrote: > > I am currently looking into using Free Radius for my user authentication > > on my networking equipment that can not support TACACS. As such, I am > > going to have 100's of devices that will be authenticating off of the > > Radius server. Will I need to list each device's IP individually in my > > 'clients' file, or will I simply be able to put a network block, and the > > key for that entire block? > > You can do that, but I wouldn't recommend it.
Why not? (Other than worry about one device being cracked compromising the others.) I've set up clients as network blocks before with no problems. Is it just the security issues that you're worried about with that? K. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
