On 2010/08/09 11:14 PM, Alan DeKok wrote:
The accounting data is sent in the clear on a LAN. This shouldn't be
a problem.
If you're sending accounting data across the Internet, use IPSec.
Don't even pretend to use anything else. RADIUS (and TACACS+) security
is simply not as good as IPSec.
Hi,
I've also got a need to implement security in the near furture.
I've not started yet, but my problem is that the embedded devices that I use
do not have enough flash to install the encryption needed for ipsec.
My thinking was to use radsecproxy->freeradius (my nas, coova, supports radsec).
Any comments on ipsec vs radsec?
Thanks,
--
Johan Meiring
Cape PC Services CC
Tel: (021) 883-8271
Fax: (021) 886-7782
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
