[GD] Looks to me like you didn't configure 10.1.2.254 as a valid client of the RADIUS server. Look in clients.conf. Rgds, Guy ok, that was the problem, but now, I have another one I am grateful very much for their amiability. here´s debug: ....... rad_recv: Access-Request packet from host 10.1.2.254:32773, id=13, length=113 User-Name = "alfonso" NAS-IP-Address = 132.247.5.254 NAS-Port = 1 NAS-Port-Type = Wireless-802.11 Calling-Station-Id = "0050FCBE29C0" Called-Station-Id = "000B86505910" Framed-MTU = 1100 EAP-Message = 0x0201000c01616c666f6e736f Message-Authenticator = 0x806e47c0179e08ad4106ba47b7bc66b1 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 8 modcall[authorize]: module "preprocess" returns ok for request 8 modcall[authorize]: module "chap" returns noop for request 8 modcall[authorize]: module "mschap" returns noop for request 8 rlm_realm: No '@' in User-Name = "alfonso", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 8 rlm_eap: EAP packet type response id 1 length 12 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 8 users: Matched entry alfonso at line 102 modcall[authorize]: module "files" returns ok for request 8 modcall: group authorize returns updated for request 8 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 8 rlm_eap: EAP Identity rlm_eap: processing type tls rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 8 modcall: group authenticate returns handled for request 8 Sending Access-Challenge of id 13 to 10.1.2.254:32773 EAP-Message = 0x010200061920 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x590689686fe613d42e824e58b76401ae Finished request 8 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 10.1.2.254:32773, id=13, length=113 Sending duplicate reply to client aruba-wpa:32773 - ID: 13 Re-sending Access-Challenge of id 13 to 10.1.2.254:32773 --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Cleaning up request 8 ID 13 with timestamp 42d533e2 Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 10.1.2.254:32773, id=13, length=113 User-Name = "alfonso" NAS-IP-Address = 132.247.5.254 NAS-Port = 1 NAS-Port-Type = Wireless-802.11 Calling-Station-Id = "0050FCBE29C0" Called-Station-Id = "000B86505910" Framed-MTU = 1100 EAP-Message = 0x0201000c01616c666f6e736f Message-Authenticator = 0x806e47c0179e08ad4106ba47b7bc66b1 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 9 modcall[authorize]: module "preprocess" returns ok for request 9 modcall[authorize]: module "chap" returns noop for request 9 modcall[authorize]: module "mschap" returns noop for request 9 rlm_realm: No '@' in User-Name = "alfonso", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 9 rlm_eap: EAP packet type response id 1 length 12 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 9 users: Matched entry alfonso at line 102 modcall[authorize]: module "files" returns ok for request 9 modcall: group authorize returns updated for request 9 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 9 rlm_eap: EAP Identity rlm_eap: processing type tls rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 9 modcall: group authenticate returns handled for request 9 Sending Access-Challenge of id 13 to 10.1.2.254:32773 EAP-Message = 0x010200061920 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xac2466bb99dfc47869c9e09a7903e6e2 Finished request 9 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 10.1.2.254:32773, id=13, length=113 Sending duplicate reply to client aruba-wpa:32773 - ID: 13 Re-sending Access-Challenge of id 13 to 10.1.2.254:32773 --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Cleaning up request 9 ID 13 with timestamp 42d533ec Nothing to do. Sleeping until we see a request. --------------------------------- Do You Yahoo!? La mejor conexión a Internet y 2GB extra a tu correo por $100 al mes. http://net.yahoo.com.mx