Bernard Aboba wrote:
BTW, how does IPsec solve the fragmentation problem for RADIUS?
Maybe it prevents the "broken" firewalls from peeking into the packets, seeing UDP fragments, and dropping them. They skate by via means of an IPsec pass through feature. Just a guess.
-- to unsubscribe send a message to radiusext-request@ops.ietf.org with the word 'unsubscribe' in a single line as the message text body. archive: <http://psg.com/lists/radiusext/>