Hi, > > AFAIK most switching devices (including Cisco, commonly used here) does not support the message-authenticator attribute. However the solution above works now, thanks again! ? we use Cisco and have Message Authenticator enforcement turned on. alan