OK, I cut out the history on this thread, because I think I’ve narrowed it down. I enabled detail reply logging on both the 2.2.10 install that is working, and the 3.0.17 one that is not. The first response below is from 3.0.17, and the VPN software logs that as a CHAP authentication failure. The second response below is from the 2.2.10 version. I’m guessing at this point (but I have a forum post open on Ubiquiti to confirm) that the missing MS-CHAP2-Success value is the problem. Mon Dec 3 21:44:12 2018 Packet-Type = Access-Accept Framed-Protocol = PPP Framed-Compression = Van-Jacobson-TCP-IP Timestamp = 1543891452 Mon Dec 3 21:56:04 2018 Packet-Type = Access-Accept Framed-Protocol = PPP Framed-Compression = Van-Jacobson-TCP-IP MS-CHAP2-Success = 0x31533d31413533414644303142413034324443374639313444384245423634373131433634363642463830 Is there a way to configure 3.0.17 to send the MS-CHAP2-Success value? Thanks, -Eric