Hello, if the Switch sends requests can see only in wireshark this: ICMP 435 Destination unreachable (Communication administratively filtered) $ tshark -Y "ip.addr==192.168.1.0/24" Capturing on 'eth0' 109 12.985452883 192.168.1.78 → 172.16.1.28 RADIUS 407 Access-Request id=5 110 12.985550915 172.16.1.28 → 192.168.1.78 ICMP 435 Destination unreachable (Communication administratively filtered) 173 17.971115508 192.168.1.78 → 172.16.1.28 RADIUS 407 Access-Request id=5, Duplicate Request 174 17.971208619 172.16.1.28 → 192.168.1.78 ICMP 435 Destination unreachable (Communication administratively filtered) 205 22.971310597 192.168.1.78 → 172.16.1.28 RADIUS 407 Access-Request id=5, Duplicate Request 206 22.971388225 172.16.1.28 → 192.168.1.78 ICMP 435 Destination unreachable (Communication administratively filtered) 247 27.971195313 192.168.1.78 → 172.16.1.28 RADIUS 407 Access-Request id=5, Duplicate Request 248 27.971249900 172.16.1.28 → 192.168.1.78 ICMP 435 Destination unreachable (Communication administratively filtered) but in debug mode (raduisd -X) can see nothing. Listening on auth address * port 1812 bound to server default Listening on acct address * port 1813 bound to server default Listening on auth address :: port 1812 bound to server default Listening on acct address :: port 1813 bound to server default Listening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel Listening on proxy address * port 49780 Listening on proxy address :: port 40915 Ready to process requests What did I wrong ? --------------- If I dow a local test with radtest I can see there something radtest <PC MAC Address> none localhost 10 testing123