I have read on the list and the FR wiki that decreasing the MTU value for the tunnel can help alleviate the pesky EAP session did not finish problem. I would like to try this as I am getting the same issue on IOS and Android based phones using the default certs FR ships with. However I cannot find where to specify the MTU value, I assume it is in the inner-tunnel virtual server, but my google-fu is weak today and cannot find any instructions. I see several messages on the list saying that is should be done but none actually explaining HOW. Someone please point me in the correct direction. Jake Sallee Godfather of Bandwidth System Engineer University of Mary Hardin-Baylor 900 College St. Belton, Texas 76513 Fone: 254-295-4658 Phax: 254-295-4221