Re: (PM) Radius (fwd)

Chris Panayis (chris@freedom2surf.net)
Fri, 7 Nov 1997 10:24:32 -0000

Given session ids I do not see why MZ is saying that a security server
must use snmp to ensure a correct login count?

The only possible problem without using SNMP appears to be when an ISDN
user connects and disconnects rapidly and a new start session arrives
before the old stop session arrives - couldn't this be recognised by the
radius server which waits a little bit longer before replying to see if
a stop session arrives for the previous session? Unless the network
between the NAP and the Security server is very bad at least the second
(or third) attempt at sending a stop session should get through......

This is how our security server works here for a wide range of NAPs.
Performing SNMP lookups can only make things worse as timing issues then
become even more critical! Using SNMP for reporting network related
problems (eg. lines down) to the security server is fine.

Kind Regards

Chris Panayis
Freedom To Surf
-
To unsubscribe, email 'majordomo@livingston.com' with
'unsubscribe portmaster-users' in the body of the message.