hi, Are you sending plain text passwords? if worried about the RADIUS datagram being sniffed and attacked then maybe EAP or RADSEC is the way to go... alan