Hi gurus: i followed the advice to sue "radiusd -X" and here is what i got: rad_recv: Access-Request packet from host 192.168.255.138 port 65267, id=176, length=53 User-Name = "glu" User-Password = "12345678" NAS-Identifier = "r8" NAS-IP-Address = 10.100.11.3 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "glu", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound [files] users: Matched entry glu at line 199 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop Found Auth-Type = Local WARNING: Please update your configuration, and remove 'Auth-Type = Local' WARNING: Use the PAP or CHAP modules instead. No "known good" password was configured for the user. As a result, we cannot authenticate the user. Failed to authenticate the user. Using Post-Auth-Type Reject +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> glu attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 176 to 192.168.255.138 port 65267 Waking up in 4.9 seconds. Cleaning up request 0 ID 176 with timestamp +13 Ready to process requests. here is my config for "users": glu Auth-Type := Local Cleartext-Password := "12345678", Juniper-Local-User-Name = "tester" anyone knows what the problems are? Thanks...