Ben Thompson wrote: > Thanks, but unless I'm missing somthing I don't understand how this > can this work from the inner tunnel without "update outer.reply" ? Read raddb/eap.conf. Look for "use_tunneled_reply" This is documented. Alan DeKok.