Hi,

> No they can't. Reply-Messages are prohibited in packets containing 
> EAP-Message attributes.

really? well...I guess if you believe in RFC 3579 and hope that everyone
read section 2.2 of that - invalid packet discussion then you'd
hope so... however, I see tonnes of packets proxied through the NRPS
that have EAP-Message and Reply-Message in the same packet.

> Which is why I specified an alternate VSA :P

aye. Microsoft actually have a 'Reason-Code' that is interesting...

http://technet.microsoft.com/en-us/library/cc785145.aspx

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to