Hi, I'm trying to implement two factor authentication using a CISCO VPN device, freeRADIUS, and RSA SecurID tokens. We would like to utilise existing username/password infrastructure by performing this part of the authentication on the LDAP directories and then the username/token-code authentication to occur via the RSA product. The initial LDAP authentication has been implemented correctly. Is it possible to use FreeRADIUS to perform an initial authentication Username/Password and respond with an Access-Challenge and then when the the second Access-Request comes through, proxy it through to the RSA Authentication Manager? And if so, what is the best approach to take to implement this? Thanks for your help with this, Amz _________________________________________________________________ It's simple! Sell your car for just $40 http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fsecure%2Dau%2Eimrworldwide%2...