A method, comprising: Recognizing (S31) at an access point of a wireless communication network, an access of a user equipment, the user equipment being served by a base station or controller of a cellular communication network, Receiving (S3, S32) at the access point, an authentication request from the user equipment which accesses the access point, forwarding (S4, S32) the authentication request to an authentication server, receiving (S5, S32) at the access point, a response from the authentication server and determining whether the response indicates a successful authentication, wherein if the response from the authentication server indicates a successful authentication: withholding, at the access point, the authentication response, transmitting (S6, S33) a request to offload traffic to the wireless communication network for the user equipment to the base station or controller which serves the user equipment, receiving (S8, S34) at the access point, a response from the base station or controller indicating whether the request is permitted or not and checking the response, and: if it is indicated in the response from the base station or controller that the offload is permitted, transmitting (S9, S35) a successful authentication response message to the user equipment indicating the permission to the user equipment; or if it is indicated in the response from the base station or controller that the offload is not permitted, tweaking the authentication response at the access point to indicate unsuccessful authentication to the user equipment, and transmitting the authentication response to the user equipment. Recognizing (S31) at an access point of a wireless communication network, an access of a user equipment, the user equipment being served by a base station or controller of a cellular communication network, Receiving (S3, S32) at the access point, an authentication request from the user equipment which accesses the access point, forwarding (S4, S32) the authentication request to an authentication server, receiving (S5, S32) at the access point, a response from the authentication server and determining whether the response indicates a successful authentication, wherein if the response from the authentication server indicates a successful authentication: withholding, at the access point, the authentication response, transmitting (S6, S33) a request to offload traffic to the wireless communication network for the user equipment to the base station or controller which serves the user equipment, receiving (S8, S34) at the access point, a response from the base station or controller indicating whether the request is permitted or not and checking the response, and: if it is indicated in the response from the base station or controller that the offload is permitted, transmitting (S9, S35) a successful authentication response message to the user equipment indicating the permission to the user equipment; or if it is indicated in the response from the base station or controller that the offload is not permitted, tweaking the authentication response at the access point to indicate unsuccessful authentication to the user equipment, and transmitting the authentication response to the user equipment. <EOS>