hi, > I am also including the entire packet capture just in case it helps. no. just output of radiusd -X this is probably the simply MSCHAP retry message... so, all you need to do is find the part in your eap module config relating to the mschap and ensuring you enable the error message retry....and then edit the mschap module to also do the same. alan