Of accounting data and security

[Johan Meiring]

On 2010/08/09 11:14 PM, Alan DeKok wrote:
>    The accounting data is sent in the clear on a LAN.  This shouldn't be
> a problem.
>
>    If you're sending accounting data across the Internet, use IPSec.
> Don't even pretend to use anything else.  RADIUS (and TACACS+) security
> is simply not as good as IPSec.
>

Hi,

I've also got a need to implement security in the near furture.

I've not started yet, but my problem is that the embedded devices that I use 
do not have enough flash to install the encryption needed for ipsec.

My thinking was to use radsecproxy->freeradius (my nas, coova, supports radsec).

Any comments on ipsec vs radsec?

Thanks,



-- 


Johan Meiring
Cape PC Services CC
Tel: (021) 883-8271
Fax: (021) 886-7782