Sion wrote: > That's what I thought, but it my linelog log it shows it being empty. The MS-CHAP-Error is in the reply. > I've tried putting 'linelog' in the post-auth sections of both the > default and inner-tunnel virtual servers but no joy. Am I missing > something obvious here? See the "Post-Auth-Type Reject" block, too. Alan DeKok.