I am having EAP issues with MSCHAPv2 packets. Does this output point to misconfiguration of FR or a NAS issue or both? Fri Jun 25 10:42:30 2010 : Info: ++[pap] returns noop Fri Jun 25 10:42:30 2010 : Info: Found Auth-Type = MSCHAP Fri Jun 25 10:42:30 2010 : Info: +- entering group MS-CHAP {...} Fri Jun 25 10:42:30 2010 : Info: [mschap] Told to do MS-CHAPv2 for 0010E741540D@WiMax.com with NT-Password Fri Jun 25 10:42:30 2010 : Info: [mschap] FAILED: MS-CHAP2-Response is incorrect Fri Jun 25 10:42:30 2010 : Info: ++[mschap] returns reject Fri Jun 25 10:42:30 2010 : Info: Failed to authenticate the user. } # server inner-tunnel Fri Jun 25 10:42:30 2010 : Info: [ttls] Got tunneled reply code 3 Framed-Filter-Id = "SP=sp1:MSF=msf1;" Session-Timeout = 4200 MS-CHAP-Error = "LE=691 R=1" Fri Jun 25 10:42:30 2010 : Info: [ttls] Got tunneled Access-Reject Fri Jun 25 10:42:30 2010 : Info: [eap] Handler failed in EAP/ttls Fri Jun 25 10:42:30 2010 : Info: [eap] Failed in EAP select Fri Jun 25 10:42:30 2010 : Info: ++[eap] returns invalid David
On 25/06/10 15:44, David Peterson wrote:
I am having EAP issues with MSCHAPv2 packets. Does this output point to misconfiguration of FR or a NAS issue or both?
Since you trimmed the debug output, it's impossible to be sure, but it points to the password on the client and server not being the same.
Fri Jun 25 10:42:30 2010 : Info: [mschap] Told to do MS-CHAPv2 for 0010E741540D@WiMax.com with NT-Password
Fri Jun 25 10:42:30 2010 : Info: [mschap] FAILED: MS-CHAP2-Response is incorrect
participants (2)
-
David Peterson -
Phil Mayers