You need to profile your authentication What modules are you using? Run in rasiusd -Xxx (to get timings rather than just debug) Find the slow point. We use 2048 bit cert and DH and our PEAP etc take milliseconds alan