Hello. I'm puzzled about eap ttls accounting, namely with interim-updates. My setup: freeradius 2.1.10 on debian squeeze, mikrotik RouterOs version 3.13 as NAS. On the NAS I enabled eap accounting; on the freeradius I set copy_request_to_tunnel = yes use_tunneled_reply = yes update outer.reply { User-Name = "%{request:User-Name}" } If I look at replay-detail I found Fri Feb 18 09:46:53 2011 Packet-Type = Access-Accept User-Name = "cecchinip@esf" MS-MPPE-Recv-Key = 0x86 etc etc But when inspecting interim-updates .. Fri Feb 18 10:03:53 2011 Service-Type = Framed-User NAS-Port-Id = "wlan2" User-Name = "anonymous" Acct-Session-Id = "82b00004" Acct-Multi-Session-Id = "bla bla ... " Acct-Authentic = RADIUS Acct-Status-Type = Interim-Update Acct-Session-Time = 1020 Acct-Input-Octets = 4117 Acct-Input-Gigawords = 0 Acct-Input-Packets = 27 Acct-Output-Octets = 2515 Acct-Output-Gigawords = 0 Acct-Output-Packets = 63 NAS-Identifier = "EduroamTest" NAS-IP-Address = ************* Acct-Delay-Time = 0 Acct-Unique-Session-Id = "bed886a60e348ed6" Timestamp = 1298019833 Request-Authenticator = Verified Looks like the radius honours the request to send out the inner identity, but the nas get rid of and continue to use 'anonymous'. It's that, is a NAS's problem or maybe could be something I misconfigured on freeradius ? Any hint? And thanks in advance. Paolo.