Using a mySQL database, to store user reply and check attributes as well as for accounting purposes. Was using radius MAC-authentication. Didnt suit our purpose, becoz there was no application back-end to provide user statistics on data uploaded/downloaded. Tested with hotspot, with MAC auth, and works fine. Final stage of project is to get this working with a first step authentication, key exchange mechanism, of which i’ve chosen PEAP, since it does nt require a client end certificate. I’ve setup openSSL, and created certificates, with private keys that i’ve integrated in freeRADIUS. However, I dont seem to get anywhere. The RADIUS log, performs the server, client handshakes, certificate processing. I configured the supplicant (Windows XP wireless, setup as PEAP, not windows login). It prompts for a username, password, and domain name… there is no domain name, entered username and password as it is in the mySQL database, but the client keeps trying to validate authentication to the NAS. The mikrotik i’ve configured, security mode=dynamic keys, EAP auth with TKIP encryption, EAP mode = passthrough (to allow the radius server to do Authentication), no certificates. Would like to know if anyone has had success with such a setup or similar. The RADIUS server seems to stop at sending a challenge to the client, but a response to the challenge is not seen, then the client tries an auth request again. Any help wil be hugely appreciated.