How is this SHOULD > We therefore recommend that RADIUS servers SHOULD > implement duplicate detection for Access-Request > packets, as described in Section 3 of [RFC2865]. consistent with this MUST NOT? > ... the server MUST NOT process the duplicate Access-Request > again, as though it was an independent new request.
If the server implements duplicate detection, then it MUST NOT process the duplicates again. This is not inconsistent with saying that the server SHOULD implement duplicate detection.
-- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: <http://psg.com/lists/radiusext/>