No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


Users Fail to Dial Up Because the Radius Server Does not Identify the Challenge-Password Attribute

Publication Date:  2012-07-27 Views:  61 Downloads:  0
Issue Description

When the downstream PPPoE user of the ME60 dials up, 691 error occurs.

Alarm Information


Handling Process

1. Use the debugging radius packet command, and find that information about the response of the authentication refusal packet with code=2 is that the username and password are incorrect.

2. The username and password are correct.
3. Change PPP on the virtual template to PAP, and then the user can access the network.

RADIUS identifies only the username and password encrypted in PAP mode; however, it does not support CHAP. That is, RADIUS does not identify the Challenge-Password attribute in the authentication request packet with code=1. It identifies only the Password attribute. When CHAP on the virtual template is used, the user fails to dial up. When PAP is used, the authentication succeeds. 

Root Cause

1. RADIUS does not respond.

2. The dialer fails.

3. The attributes of the authentication request packet with code=1 does not match RADIUS.