On 26/06/12 10:53, alan buxey wrote: > can anyone else validate this behaviour (in case its resulting from something we've done)? Which version of the server? I thought there was code in the EAP-TTLS and EAP-PEAP modules which specifically handled this, and removed the MPPE keys from the inner reply.