If an EAP Start packet is sent by a client (two bytes, CODE=request) the server returns the appropriate Access-Challenge with a Request for Identity.
The State attribute is not sent with the Access-Challenge. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
