Riccardo Veraldi wrote: > Unfortunately I am bound to 1.1.7 version in my whole infrastructure That's sad. It means you can't take advantage of the many new features in 2.1. > how > can I copy inner identity and send it to access-accept? See "use_tunneled_reply" in eap.conf. Alan DeKok.