Re: RadSec Dynamic Server Discovery

Hi,

They also claim that it's less secure to expose the RADIUS servers directly, but I don't really buy that argument.

eh? if you just use a national proxy you only need prot 2083 open to those few hosts. if you use dynamic server discovery you need to open up port 2083 to the whole internet (as you dont know the source addresses of all legitimate RADIUS servers). alan