Hi Alan, Spot on as usual. Removed the NAS-IP-Address entry and auth was successful. Entry 172 was the start of the below:- DEFAULT Framed-Protocol == PPP Framed-Protocol = PPP, Framed-Compression = Van-Jacobson-TCP-IP, Tunnel-Type == L2TP, Tunnel-Medium-Type == IP, Service-Type = Framed-User, Tunnel-Password = blahblah, Tunnel-Server-Endpoint = 192.168.0.1, Tunnel-Client-Auth-ID = Tunnel-21CN, Fall-Through = Yes Thanks again. Nick -----Original Message----- From: freeradius-users-bounces+nick=njryce.net@lists.freeradius.org [mailto:freeradius-users-bounces+nick=njryce.net@lists.freeradius.org] On Behalf Of Alan DeKok Sent: 16 August 2012 16:42 To: FreeRadius users mailing list Subject: Re: another CHAP issue Nick wrote:
testuser@randomdomain.net.uk Cleartext-Password :="test123", NAS-IP-Address == 1.1.1.1 ... rad_recv: Access-Request packet from host 62.249.192.164 port 31625, id=13, length=145 ... NAS-IP-Address = 62.249.255.146
Do you see an issue there?
[files] users: Matched entry DEFAULT at line 172
And what's on line 172? Not the entry you added.
There is a Cleartext-Password set so unsure why this error is occurring. Any help most appreciated.
Because you added MORE checks (NAS-IP-Address) that caused it to fail. Delete those checks, and it will work. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html