9 Sep
2011
9 Sep
'11
8:23 a.m.
Arran Cudbard-Bell <a.cudbardb@freeradius.org> writes:
As Alan says your NAS won't generate Accounting-Requests if the RADIUS server rejects the user (unless its very broken).
Why would that be broken? Yes, I do see that you can trigger RADIUS accounting traffic without authenticating, but the additional load (both for NAS and RADIUS server) is probably negligible compared to the failed authentication anyway. Some NASes will let you configure acct stop on reject. See e.g. http://www.juniper.net/techpubs/en_US/junos11.2/topics/reference/configurati... Bjørn