The rather important point you fail to mention is that when 1.16 was written
the protocol did not call for authenticated ACKs. That was added by the
working group long after 1.16 was released. So *of course* 1.16 doesn't deal
with them.
RADIUS 2.0 is our first major revision since that change and it does the
authentication on ACKs.
-MZ
-- Livingston Enterprises - Chair, Department of Interstitial Affairs Phone: 800-458-9966 510-426-0770 FAX: 510-426-8951 megazone@livingston.com For support requests: support@livingston.com <http://www.livingston.com/> Snail mail: 6920 Koll Center Parkway #220, Pleasanton, CA 94566 See me in person: Internet Expo, Boston, MA, October 16-17, Booth 422 ;-)