chilli features...

[Peter Nixon]

On Mon 11 Feb 2008, wlan at mac.com wrote:
> > Again, Chilli does not enforce this message, it just listens for  
> > it. And only Chilli. So why would a developer configure his RADIUS  
> > to send this message aloong with the response, when there is no  
> > Chilli in use??
>
> Yes, but since your logic is coming from the RADIUS server, and this  
> RADIUS server MAY be provisioning for more than just Chilli powered  
> access controllers (or, indeed, unknown A/Cs in a roaming context), I  
> don't think the feature should interfere with these situations.

Given that you are talking about an access reject message, and any NAS should 
infact reject access anyway if it doesnt receive an access accept, and any 
NAS should just throw away any message/attribute it doesnt understand,  I 
don't think it would be a big problem. As to why you would ever configure 
you radius server to send a chilli VSA to a non chilli NAS, well.. that 
would be stupid... but.. I am sure some people will manage to do it..

-- 

Peter Nixon
http://peternixon.net/