>>You cannot set the Auth-Type to "MS-CHAP" and have it work unless the >>MS-CHAP challenge and response are in the radius request, which means >>the NAS has to add them. - .....so is there not a way to have FR proxy request out to the AD server?