Mike Schoenecker wrote: > if one is prone to be paranoia, using both [1] and [2] probably makes sense. Except that it is currently impractical for many sites since it requires an entirely Cisco end-to-end shop including the Cisco (or Microsoft's) RADIUS server. John