Hi,
Auth-Type MS-CHAP{
Ah... change that to MSCHAP, and it will work.
??? The config reads "MS-CHAP" with a dash because - it's been like that for the last decade - no migration warning told me it's deprecated - the default config (!!) for 3.0.11 has the dash in inner-tunnel and default Are you saying you changed the Auth-Type to MSCHAP without dash, but pretty much literally told no-one that it is so?
You probably have an Auth-Type MSCHAP" defined somewhere else, and that's used first.
Indeed, there are two other virtual servers which have this without dash (but I wouldn't know why!). So, having the more recent/correct dashless config "somewhere" magically kills all the previously nicely working dashed config? Wow. Greetings, Stefan Winter -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 2, avenue de l'Université L-4365 Esch-sur-Alzette Tel: +352 424409 1 Fax: +352 422473 PGP key updated to 4096 Bit RSA - I will encrypt all mails if the recipient's key is known to me http://pgp.mit.edu:11371/pks/lookup?op=get&search=0xC0DE6A358A39DC66