help on rlm_mschap: FAILED: MS-CHAP2-Response is incorrect

[Phil Mayers]

Jie Yang wrote:
> Hi, All,
> When I tried to develop PEAP at client side, i found I am always rejected by
> the server. The following is the log. what might be wrong?

You almost certainly need to strip the "@domain" off the username before 
mschap sees it - the username is used in calculating the challenge response.

See the "realms" module, specifically you'll want the "suffix" instance 
in authorize, "spirentcom.com" as a LOCAL realm in proxy.conf and 
proxying turned on.