Greetings, We are receiving the attached information from a Nokia IP 260 Firewall and VPN appliance, The Access-Request is processed by a Perl program (through rlm_perl), and AR::RADIUSRequest is the class of objects that represent a generic RADIUS packet (don't mind the empty attributes). The password sent is 'AAAAAAAA' but we just get gibberish on our end (and the tethereal capture also looks weird). The VPN is using PAP, as we are. Any hints on what can be wrong? (shared key is okay on both sides, and no other NAS is doing this weird thing). I'm thinking in some configuration options that may be hurting with this NAS, but, frankly... Server is 1.1.3 on a Debian 3.1 intel box. Thanks for any help david PS- tethereal capture: Frame 4 (101 bytes on wire, 101 bytes captured) Arrival Time: Jun 21, 2007 10:32:18.545587000 Time delta from previous packet: 5.050255000 seconds Time since reference or first frame: 10.108408000 seconds Frame Number: 4 Packet Length: 101 bytes Capture Length: 101 bytes Protocols in frame: eth:ip:udp:radius Ethernet II, Src: 00:17:cb:5a:81:7e, Dst: 00:11:0a:2f:61:3b Destination: 00:11:0a:2f:61:3b (HewlettP_2f:61:3b) Source: 00:17:cb:5a:81:7e (00:17:cb:5a:81:7e) Type: IP (0x0800) Internet Protocol, Src Addr: 10.235.236.14 (10.235.236.14), Dst Addr: 10.235.244.133 (10.235.244.133) Version: 4 Header length: 20 bytes Differentiated Services Field: 0x00 (DSCP 0x00: Default; ECN: 0x00) 0000 00.. = Differentiated Services Codepoint: Default (0x00) .... ..0. = ECN-Capable Transport (ECT): 0 .... ...0 = ECN-CE: 0 Total Length: 87 Identification: 0x79dc (31196) Flags: 0x00 0... = Reserved bit: Not set .0.. = Don't fragment: Not set ..0. = More fragments: Not set Fragment offset: 0 Time to live: 55 Protocol: UDP (0x11) Header checksum: 0x1350 (correct) Source: 10.235.236.14 (10.235.236.14) Destination: 10.235.244.133 (10.235.244.133) User Datagram Protocol, Src Port: 2305 (2305), Dst Port: radius (1812) Source port: 2305 (2305) Destination port: radius (1812) Length: 67 Checksum: 0xa4c4 (correct) Radius Protocol Code: Access Request (1) Packet identifier: 0x41 (65) Length: 59 Authenticator: 0x9FE8712917FDD893EF8E416B424D0E89 Attribute value pairs t:User Name(1) l:9, Value:"user1" User-Name: un41814 t:User Password(2) l:18, Value:A0EB498C3FAD6541B06C0785F76F04C2 t:Service Type(6) l:6, Value:Login(1) Service-Type: Login (1) t:NAS IP Address(4) l:6, Value: xxx.xxx.xxx.xxx Nas IP Address: xxx.xxx.xxx.xxx (xxx.xxx.xxx.xxx) PPS- Perl Data::Dumper dump: User-Password = 'AAAAAAAA' 'REQUEST' => bless( { 'MODIFICATION_TIME' => '1182414728.493002', 'ATTR' => { 'Acct-Input-Octets' => '', 'NAS-Port-Type' => '', 'Acct-Session-Id' => '', 'Service-Type' => 'Login-User', 'Called-Station-Id' => '', 'Client-IP-Address' => '10.235.236.14', 'Tunnel-Client-Endpoint' => '', 'Acct-Authentic' => '', 'Acct-Status-Type' => '', 'Acct-Output-Packets' => '', 'NAS-IP-Address' => 'xxx.xxx.xxx.xxx', 'Acct-Output-Octets' => '', 'Acct-Tunnel-Client-Endpoint:0' => '', 'Acct-Terminate-Cause' => '', 'Acct-Session-Time' => '', 'Calling-Station-Id' => '', 'Framed-Protocol' => '', 'User-Name' => 'user1', 'User-Password' => 'x\\264\\343\\023y\\232\\004\\211\\357\\333\\010\\214\\2163U\\217', 'Tunnel-Client-Endpoint:0' => '', 'Acct-Input-Packets' => '', 'Framed-IP-Address' => '', 'Class' => '', 'NAS-Port' => '', 'Acct-Delay-Time' => '' }, 'CREATION_TIME' => '1182414728.493002' }, 'AR::RADIUSRequest' ),