>The default supplicant behavior in Windows XP is PEAP using the logged-in >user's credentials.
So? That is so *if* NAS asks for credentials. If you are using mac authentication and don't want to authenticate users - don't set your NAS to use 802.1x. You can allocate VLANs from radius on basis of mac alone (which is what you want to do). >Can FreeRADIUS authenticate everyone in an 802.1x/PEAP environment without >regard to the credentials they provide? The whole point of EAP is to prevent this. No RFC compliant radius server will do that. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html