Hi friends, I want to deploy freeradius authentication in my wireless lan. I m using EAP-TLS with Windows XP SP2 inbuilt supplicant. Everything works fine till the freeradius server and hostapd is initialized.But then i think authentication fails.It shows a list of "REAUTH_TIMER entering state INITIALIZE" message.For more details i m pasting he hostapd output.Plz help. hostapd -dd hostapd.conf Configuration file: hostapd.conf ctrl_interface_group=0 madwifi_set_iface_flags: dev_up=0 Using interface ath0 with hwaddr 00:15:6d:50:02:53 and ssid 'Havanet-EDS' ath0: RADIUS Authentication server 192.168.2.224:1812 ath0: RADIUS Accounting server 192.168.2.224:1813 madwifi_set_ieee8021x: enabled=1 madwifi_configure_wpa: group key cipher=1 madwifi_configure_wpa: pairwise key ciphers=0xa madwifi_configure_wpa: key management algorithms=0x1 madwifi_configure_wpa: rsn capabilities=0x0 madwifi_configure_wpa: enable WPA= 0x1 madwifi_set_iface_flags: dev_up=1 WPA: group state machine entering state GTK_INIT GMK - hexdump(len=32): [REMOVED] GTK - hexdump(len=32): [REMOVED] WPA: group state machine entering state SETKEYSDONE madwifi_set_key: alg=TKIP addr=00:00:00:00:00:00 key_idx=1 madwifi_set_privacy: enabled=1 ath0: RADIUS Sending RADIUS message to accounting server ath0: RADIUS Next RADIUS client retransmit in 3 seconds SIOCGIWRANGE: WE(compiled)=19 WE(source)=13 enc_capa=0xf Flushing old station entries madwifi_sta_deauth: addr=ff:ff:ff:ff:ff:ff reason_code=3 Deauthenticate all stations l2_packet_receive - recvfrom: Network is down Wireless event: cmd=0x8c03 len=20 ath0: STA 00:16:b6:99:81:13 IEEE 802.11: associated New STA ath0: STA 00:16:b6:99:81:13 WPA: event 1 notification madwifi_del_key: addr=00:16:b6:99:81:13 key_idx=0 ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: start authentication IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 BE_AUTH entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 AUTH_KEY_TX entering state NO_KEY_TRANSMIT IEEE 802.1X: 00:16:b6:99:81:13 KEY_RX entering state NO_KEY_RECEIVE IEEE 802.1X: 00:16:b6:99:81:13 CTRL_DIR entering state IN_OR_BOTH IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 BE_AUTH entering state IDLE IEEE 802.1X: 00:16:b6:99:81:13 KEY_RX entering state NO_KEY_RECEIVE IEEE 802.1X: 00:16:b6:99:81:13 CTRL_DIR entering state FORCE_BOTH IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 KEY_RX entering state NO_KEY_RECEIVE ath0: STA 00:16:b6:99:81:13 WPA: start authentication WPA: 00:16:b6:99:81:13 WPA_PTK entering state INITIALIZE madwifi_del_key: addr=00:16:b6:99:81:13 key_idx=0 WPA: 00:16:b6:99:81:13 WPA_PTK_GROUP entering state IDLE WPA: 00:16:b6:99:81:13 WPA_PTK entering state AUTHENTICATION WPA: 00:16:b6:99:81:13 WPA_PTK entering state AUTHENTICATION2 IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state DISCONNECTED ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: unauthorizing port madwifi_set_sta_authorized: addr=00:16:b6:99:81:13 authorized=0 IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state RESTART IEEE 802.1X: station 00:16:b6:99:81:13 - new auth session, clearing State IEEE 802.1X: Generated EAP Request-Identity for 00:16:b6:99:81:13 (identifier 0, timeout 30) IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state CONNECTING IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state AUTHENTICATING IEEE 802.1X: 00:16:b6:99:81:13 BE_AUTH entering state REQUEST IEEE 802.1X: Sending EAP Packet to 00:16:b6:99:81:13 (identifier 0) TX EAPOL - hexdump(len=42): 00 16 b6 99 81 13 00 15 6d 50 02 53 88 8e 01 00 00 18 01 00 00 18 01 57 65 6c 63 6f 6d 65 54 6f 48 61 76 61 6e 65 74 57 44 53 IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 15 bytes from 00:16:b6:99:81:13 IEEE 802.1X: version=1 type=0 length=11 EAP: code=2 identifier=0 length=11 (response) ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: received EAP packet (code=2 id=0 len=11) from STA: EAP Response-Identity (1) ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: STA identity 'client' IEEE 802.1X: 00:16:b6:99:81:13 BE_AUTH entering state RESPONSE Encapsulating EAP message into a RADIUS packet ath0: RADIUS Sending RADIUS message to authentication server ath0: RADIUS Next RADIUS client retransmit in 0 seconds IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 5 bytes from 00:16:b6:99:81:13 IEEE 802.1X: version=1 type=1 length=0 ignoring 1 extra octets after IEEE 802.1X packet ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: received EAPOL-Start from STA ath0: STA 00:16:b6:99:81:13 WPA: event 5 notification WPA: 00:16:b6:99:81:13 WPA_PTK entering state AUTHENTICATION2 IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state ABORTING IEEE 802.1X: 00:16:b6:99:81:13 BE_AUTH entering state INITIALIZE ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: aborting authentication IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state RESTART IEEE 802.1X: station 00:16:b6:99:81:13 - new auth session, clearing State IEEE 802.1X: Generated EAP Request-Identity for 00:16:b6:99:81:13 (identifier 1, timeout 30) IEEE 802.1X: 00:16:b6:99:81:13 BE_AUTH entering state IDLE IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state CONNECTING IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 AUTH_PAE entering state AUTHENTICATING IEEE 802.1X: 00:16:b6:99:81:13 BE_AUTH entering state REQUEST IEEE 802.1X: Sending EAP Packet to 00:16:b6:99:81:13 (identifier 1) TX EAPOL - hexdump(len=42): 00 16 b6 99 81 13 00 15 6d 50 02 53 88 8e 01 00 00 18 01 01 00 18 01 57 65 6c 63 6f 6d 65 54 6f 48 61 76 61 6e 65 74 57 44 53 IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 15 bytes from 00:16:b6:99:81:13 IEEE 802.1X: version=1 type=0 length=11 EAP: code=2 identifier=1 length=11 (response) ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: received EAP packet (code=2 id=1 len=11) from STA: EAP Response-Identity (1) ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: STA identity 'client' IEEE 802.1X: 00:16:b6:99:81:13 BE_AUTH entering state RESPONSE Encapsulating EAP message into a RADIUS packet ath0: RADIUS Sending RADIUS message to authentication server ath0: RADIUS Next RADIUS client retransmit in 0 seconds IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 15 bytes from 00:16:b6:99:81:13 IEEE 802.1X: version=1 type=0 length=11 EAP: code=2 identifier=0 length=11 (response) ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: EAP Identifier of the Response-Identity does not match (was 0, expected 1) - ignored IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 15 bytes from 00:16:b6:99:81:13 IEEE 802.1X: version=1 type=0 length=11 EAP: code=2 identifier=1 length=11 (response) ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: received EAP packet (code=2 id=1 len=11) from STA: EAP Response-Identity (1) ath0: STA 00:16:b6:99:81:13 IEEE 802.1X: STA identity 'client' IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE ath0: STA 00:00:00:00:00:00 RADIUS: Resending RADIUS message (id=0) ath0: RADIUS Next RADIUS client retransmit in 3 seconds IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE IEEE 802.1X: 00:16:b6:99:81:13 REAUTH_TIMER entering state INITIALIZE ath0: STA 00:16:b6:99:81:13 RADIUS: Resending RADIUS message (id=2) ath0: STA 00:16:b6:99:81:13 RADIUS: Resending RADIUS message (id=1) ath0: RADIUS Next RADIUS client retransmit in 3 seconds. The authentication does not get successful and the wireless network notification icon on the windows XP side shows "validating" status for hours. Plzzz help. --------------------------------- How low will we go? Check out Yahoo! Messengers low PC-to-Phone call rates.