Thanks for the response Alan. But can you please let me know whether it is mentioned in the radius rfc that the client should validate the source address? Thanks & Best Regards, Kartik On Feb 18, 2008 6:01 PM, Alan DeKok <aland@deployingradius.com> wrote:
Kartik CDS wrote:
Radius client sends access-request to the ip address VIP The cluster is responding with IP1 or IP2 instead of VIP as the source address, should the radius client allow such a response ?
No. You need to use "udpfromto" in the server. See the "configure" flags.
I mean to say whether the radius client should validate the source address ?? [ I couldnt find anything related to this in the RFC, kindly help]
Yes, it needs to validate the source address.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html