When using freeradius with wpa_supplicant I have noticed freeradius does not bump the EAP id when sending back the Access-Accept packet. wpa_supplicant notices this and has a work around. Will the WPA drop this packet (it is important because it has the keys in the attributes). Has anyone reported this bug? The reason I ask is because after receiving the accept packet, wpa_supplicant goes into AUTHENTICATED state but cannot connect to the network, or associate. Any ideas? the wpa_supplicant (last part) trace: WPA: Sending EAPOL-Key 2/4 RX EAPOL from 00:0f:b5:7a:17:bc EAPOL: Ignoring WPA EAPOL-Key frame in EAPOL state machines IEEE 802.1X RX: version=1 type=3 length=119 EAPOL-Key type=254 WPA: RX message 3 of 4-Way Handshake from 00:0f:b5:7a:17:bc (ver=1) WPA: IE KeyData - hexdump(len=24): dd 16 00 50 f2 01 01 00 00 50 f2 02 01 00 00 50 f2 02 01 00 00 50 f2 01 WPA: No WPA/RSN IE for this AP known. Trying to get from scan results WPA: Found the current AP from updated scan results WPA: Sending EAPOL-Key 4/4 WPA: Installing PTK to the driver. WPA: RSC - hexdump(len=6): 00 00 00 00 00 00 RX EAPOL from 00:0f:b5:7a:17:bc EAPOL: Ignoring WPA EAPOL-Key frame in EAPOL state machines IEEE 802.1X RX: version=1 type=3 length=127 EAPOL-Key type=254 WPA: RX message 1 of Group Key Handshake from 00:0f:b5:7a:17:bc (ver=1) WPA: Group Key - hexdump(len=32): [REMOVED] WPA: Installing GTK to the driver (keyidx=1 tx=0). WPA: RSC - hexdump(len=6): 00 00 00 00 00 00 WPA: Sending EAPOL-Key 2/2 WPA: Key negotiation completed with 00:0f:b5:7a:17:bc [PTK=TKIP GTK=TKIP] Cancelling authentication timeout Removed BSSID 00:0f:b5:7a:17:bc from blacklist EAPOL: External notification - portValid=1 EAPOL: SUPP_PAE entering state AUTHENTICATED Signal 2 received - terminating ndis_get_oid: oid=0xd010101 len (6) failed ndis_set_oid: oid=0xd010114 len (4) failed ndis_get_oid: oid=0xd010101 len (6) failed ndis_set_oid: oid=0xd010114 len (4) failed ndis_get_oid: oid=0xd010101 len (6) failed ndis_set_oid: oid=0xd010114 len (4) failed ndis_get_oid: oid=0xd010101 len (6) failed ndis_set_oid: oid=0xd010114 len (4) failed EAPOL: External notification - portEnabled=0 EAPOL: SUPP_PAE entering state DISCONNECTED EAPOL: SUPP_BE entering state INITIALIZE EAP: EAP entering state DISABLED EAPOL: External notification - portValid=0 wpa_driver_ndis_set_wpa: enabled=0 No keys have been configured - skip key clearing rmdir[ctrl_interface]: No such file or directory EAP: deinitialize previously used EAP method (25, PEAP) at EAP deinit the freeradius (last part trace): ending Access-Challenge of id 12 to 192.168.0.229:1075 EAP-Message = 0x010c00501900170301002028f83aa4e802c2965c29685e7521a11ea189ad707d72f340478950afc820a3dd1703010020c159819f4919952b824a4c2e7d71d92338cfeb7e35842ecca2590d0ec5e9a91f Message-Authenticator = 0x00000000000000000000000000000000 State = 0xed25ce47ac6c8028e663a2f6f53414e7 rad_recv: Access-Request packet from host 192.168.0.229:1075, id=13, length=251 Message-Authenticator = 0x508b7cdf35912a2b07a9f6f461200076 Service-Type = Framed-User User-Name = "dreamer" Framed-MTU = 1488 State = 0xed25ce47ac6c8028e663a2f6f53414e7 Called-Station-Id = "000FB57A17BC:NETGEAR" Calling-Station-Id = "00070EB38E2D" NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 54Mbps 802.11g" EAP-Message = 0x020c005019001703010020d636529b1ced029a7bc635638d3d21e9e6eeff64ba0e2bbdae2f362655442a601703010020653e43e16142b6e7535d53a7306aad5bc40cf157a9fa7f38c067a870a649c184 NAS-IP-Address = 192.168.0.229 NAS-Port = 1 NAS-Port-Id = "STA port # 1" Sending Access-Accept of id 13 to 192.168.0.229:1075 MS-MPPE-Recv-Key = 0x2ae009c01dc4c8af6bbf63b3a03eae0bf36d5f74277cd979e0aab0c7c0208b00 MS-MPPE-Send-Key = 0xed2e0e7f8242205404cecb7894a82d742f43a225b2f1ddae8231128e413f00ec EAP-Message = 0x030c0004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "dreamer"