Hi, > > I *believe* that this is just a fresh new incoming EAP session... > > Which means there should be no State attribute at *all*. i'll have to check the code path to see when the state is applied....eg is it added to the packet when the packet is proxied locally from the outer virtual server to the inner-tunnel ? if so... alan