Yes but IIRC your server will now not handle mschapv2 peap requests (ie normal and rfc correct clients) as there isn't a negotiate phase. Why the md5 hacking? alan