RadSec Dynamic Server Discovery

[A.L.M.Buxey at lboro.ac.uk]

Hi,

> They also claim that it's less secure to expose the RADIUS servers
> directly, but I don't really buy that argument.

eh?  if you just use a national proxy you only need prot 2083 open to those few hosts.

if you use dynamic server discovery you need to open up port 2083 to the whole
internet (as you dont know the source addresses of all legitimate RADIUS servers).

alan