IAS on a 2003 server won't authenticate a call through a Max using MS-CHAP

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: kirby_cook (kirby_cook_at_yahoo.com)
Date: 02/03/05 

Date: 3 Feb 2005 15:10:53 -0800

Users are dialling into an Ascend (now Lucent) Max 6000 from Windows XP
clients, and the Max forewards the authentication requests to an
Internet Authentication Service running on a Win 2003 server. I can
connect using PAP and CHAP. When I try to use MS-CHAP to authenticate,
I get the error, "The user attempted to use an authentication method
that is not enabled on the matching remote access policy." Even though
it *is* enabled in that policy.
It should be noted that this happens when the Max is set to try all its
available authentication protocols, PAP, CHAP,and MS-CHAP. If I set
the Max to try only MS-CHAP, the IAS says that the Max tries to send it
a bad RADIUS packet, with an illegal value of 51 in the Code field. It
sounds as if the Max just won't do MS-CHAP right. Has anyone else seen
and solved this problem? Any ideas will be welcome.

Kirby

Relevant Pages

  • Re: mpd VPN wont work after upgrade from 4.6-STABLE to 4.8-STABLE
    ... >> Microsoft MPPE encryption? ... their reverse authentication hash. ... It's normal with MS-CHAP. ... to enable MS-CHAP in both directions? ...
    (freebsd-stable)
  • Re: Routing and Remote Access - Authentication Failure
    ... Granted the article is referencing an IAS server, ... acting as a single point of contact to handle remote authentication. ... great work George and Ace! ... we overlooked that fact about MS-CHAP!! ...
    (microsoft.public.windows.server.networking)
  • Re: 802.1x Authentication
    ... IAS to authenticate the computer and the user to the domain. ... using PEAP with MS-CHAP v2 for authentication. ... Unfortunately neither PEAP nor EAP with any of the current authentication ...
    (microsoft.public.internet.radius)
  • Re: Sporadic IAS Authentication problems
    ... * Some times however, a physical reboot of the client laptop is required, ... *The remote access policy in IAS is set to grant access to the group 'Domain ... Proxy-Policy-Name = Use Windows authentication for all users ...
    (microsoft.public.internet.radius)
  • Re: Sporadic IAS Authentication problems
    ... ,1,4154,Use Windows authentication for all ... enabled on the matching remote access policy. ... That client laptop was able to authenicate and use ...
    (microsoft.public.internet.radius)