RE: When to Access-Reject vs. Silently Discard

[Avi Lior <avi@bridgewatersystems.com>]

Alan,

I don't know what you mean by close in the network.  So a typical case where
this happens is when there is a NAS in the DMZ zone and a RADIUS is
internal.

> -----Original Message-----
> From: Alan DeKok [mailto:aland@ox.org] 
> Sent: Thursday, April 07, 2005 2:56 PM
> To: Bikramjit Singh
> Cc: radiusext@ops.ietf.org
> Subject: Re: When to Access-Reject vs. Silently Discard
> 
> 
> Bikramjit Singh <BSingh@Nomadix.com> wrote:
> > [Bik] Isn't this condition also true if there is NAT in the middle? 
> > And you have provisioned the RADIUS client with the publicly known 
> > external address.
> 
>   In which case, the NAS isn't "close" in the network to the 
> RADIUS server.
> 
>   NAT & RADIUS don't interact well.
> 
>   Alan DeKok.
> 
> 
> 
> --
> to unsubscribe send a message to 
> radiusext-request@ops.ietf.org with the word 'unsubscribe' in 
> a single line as the message text body.
> archive: <http://psg.com/lists/radiusext/>
> 

--
to unsubscribe send a message to radiusext-request@ops.ietf.org with
the word 'unsubscribe' in a single line as the message text body.
archive: <http://psg.com/lists/radiusext/>