I use Tom's approach -- set all the secrets the same on
all my NAS' and then use a default client statement.  It
will protect you any which way.

As for DNS, you should have a primary and a secondary and the
chance of both failing should be slim.
You can always set several DNS entries on your
UNIX host's /etc/resolv.conf which point to off-site DNS
servers such as your upstream ISPs DNS servers.

Hope that helps.

John

At 12:42 AM 10/31/99 +1000, you wrote:
>On Sat, Oct 30, 1999 at 07:00:07AM -0600, Chris M wrote:
>> Is it a better practice to use IP addresses instead of names for 
>> <Client>?  What about using both (if DNS fails for some reason it can 
>> check the IP)?
>> 
>
>I suspect it doesn't make much difference, if DNS has failed then well
>probably other critical things are stuffed as well. If you want you
>can use Client DEFAULT and keep all your secrets (and NAS's) the same.
>
>[EMAIL PROTECTED]
>
>===
>Archive at http://www.thesite.com.au/~radiator/
>To unsubscribe, email '[EMAIL PROTECTED]' with
>'unsubscribe radiator' in the body of the message.


===
Archive at http://www.thesite.com.au/~radiator/
To unsubscribe, email '[EMAIL PROTECTED]' with
'unsubscribe radiator' in the body of the message.

Reply via email to