listuser at peternixon.net
Tue Feb 12 06:54:38 UTC 2008
On Mon 11 Feb 2008, wlan at mac.com wrote:
> > Again, Chilli does not enforce this message, it just listens for
> > it. And only Chilli. So why would a developer configure his RADIUS
> > to send this message aloong with the response, when there is no
> > Chilli in use??
> Yes, but since your logic is coming from the RADIUS server, and this
> RADIUS server MAY be provisioning for more than just Chilli powered
> access controllers (or, indeed, unknown A/Cs in a roaming context), I
> don't think the feature should interfere with these situations.
Given that you are talking about an access reject message, and any NAS should
infact reject access anyway if it doesnt receive an access accept, and any
NAS should just throw away any message/attribute it doesnt understand, I
don't think it would be a big problem. As to why you would ever configure
you radius server to send a chilli VSA to a non chilli NAS, well.. that
would be stupid... but.. I am sure some people will manage to do it..
More information about the Chilli