another CHAP issue

Nick nick at
Thu Aug 16 20:31:35 CEST 2012

Hi Alan,

Spot on as usual.  Removed the NAS-IP-Address entry and auth was successful.

Entry 172 was the start of the below:-

DEFAULT Framed-Protocol == PPP
        Framed-Protocol = PPP,
        Framed-Compression = Van-Jacobson-TCP-IP,
        Tunnel-Type == L2TP,
        Tunnel-Medium-Type == IP,
        Service-Type = Framed-User,
        Tunnel-Password = blahblah,
        Tunnel-Server-Endpoint =,
        Tunnel-Client-Auth-ID = Tunnel-21CN,
        Fall-Through = Yes

Thanks again.


-----Original Message-----
From: at
[ at] On
Behalf Of Alan DeKok
Sent: 16 August 2012 16:42
To: FreeRadius users mailing list
Subject: Re: another CHAP issue

Nick wrote:

> testuser at Cleartext-Password :="test123", 
> NAS-IP-Address ==
> rad_recv: Access-Request packet from host port 31625, 
> id=13, length=145
>         NAS-IP-Address =

  Do you see an issue there?

> [files] users: Matched entry DEFAULT at line 172

  And what's on line 172?

  Not the entry you added.

> There is a Cleartext-Password set so unsure why this error is 
> occurring.  Any help most appreciated.

  Because you added MORE checks (NAS-IP-Address) that caused it to fail.

  Delete those checks, and it will work.

  Alan DeKok.
List info/subscribe/unsubscribe? See

More information about the Freeradius-Users mailing list