Arran Cudbard-Bell wrote: > Actually ... it might be an idea to add another return path which drops > the request and sends no reply, just to make the RADIUS server seem dead > if any of it's critical dependencies fail.
I've been discussing similar issues on the IETF RADIUS list. It seems that the RFC's say the server MUST respond to the NAS for Access-Requests. Despite that, many people think it's a good idea to NOT respond in some situations. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
