I am trying to configure the coa proxy in latest Radius docker image 3.2.3. I have defined a client with a proper shared secret (message initiator) and also defined a home server with a shared secret (message destination). When I send the CoA message I see in debug that the radius server is proxying the request, the NAS at destination receiving it, it responds back to the radius server and then the radius server forwards that message back to the initiator. The problem is when I receive the final message from the radius server it has invalid message-authenticator. "Reply verification failed: Received packet from 192.168.2.157 with invalid Message-Authenticator! (Shared secret is incorrect.) I checked the shared secret on all sides, everything is as expected but somehow it signs the final message incorrectly. Thanks in advance. Attached is a debugfile of the freeradius And the request command and output is: echo " NAS-IP-Address = 192.168.2.224 Calling-Station-Id = 'BC:54:51:EF:70:AE' Event-Timestamp = $(date +%s) " | radclient -x 192.168.2.157:3799 disconnect testing123 Sent Disconnect-Request Id 7 from 0.0.0.0:33184 to 192.168.2.157:3799 length 51 NAS-IP-Address = 192.168.2.224 Calling-Station-Id = "BC:54:51:EF:70:AE" Event-Timestamp = "Oct 31 2023 13:29:27 MDT" (0) Reply verification failed: Received packet from 192.168.2.157 with invalid Message-Authenticator! (Shared secret is incorrect.)