not a single bit of EAP being triggered according to these logs. Look at the default server and how it used EAP and pushes request to inner-tunnel. You won't have any password details outside of the EAP tunnel and that ain't been created in your setup. Alan