Actually, 3com 5500 do not support "handshake" winth XP SP3 and Vista. It after introduced the command "undo dot1x handshake enable" connection did not break itself. Everything works well with HP ProCurve 2610-24/12PWR.Message: 2 Date: Wed, 01 Oct 2008 12:34:08 +0100 From: <tnt@kalik.net> Subject: Re: Problem with EAP-TLS To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Message-ID: <cOyiD7JZ.1222860848.8583230.tnt@kalik.net> Content-Type: text/plain; charset=ISO-8859-2 Radius is working fine. Your problem is with NAS: ..rad_recv: Accounting-Request packet from host 10.0.1.2:5007, id=61, length=271..Acct-Status-Type = Stop..Acct-Session-Time = 120..Acct-Terminate-Cause = Lost-Carrier.. Connection breaks after two minutes. Debug NAS to see why. NAS is sending some VSAs - does it expect any back? That MTU looks a bit low. Is it supported by the NAS? Ivan Kalik Kalik Informatika ISP