Hi, > authorize { > preprocess > suffix > eap > pap > papauth > } pap really should go at the end - i believe the default config mentions this...with maybe exclaimation marks or capital letters? alan