CHAP login "received bad Access-Accept"

RouterOS General
1

Am setting up a Mikrotik device to authenticate login attempts (SSH, Winbox) against a RADIUS server. After some initial headaches I’ve got the RADIUS server to reply with an Access-Accept packet. But now I se the Mikrotik device is refusing the packet!!

12:16:25 radius,debug RAD:: resending 0d:08 
12:16:25 radius,debug,packet RAD:: sending Access-Request with id 53 to 192.168.96.29:1812 
12:16:25 radius,debug,packet RAD::     Signature = 0xf0ff03e167a608ec5d6a1e1215fc8a3c 
12:16:25 radius,debug,packet RAD::     Service-Type = 1 
12:16:25 radius,debug,packet RAD::     User-Name = "username" 
12:16:25 radius,debug,packet RAD::     CHAP-Challenge = 0xc5b8245e83f082a660d691820af1b8b2 
12:16:25 radius,debug,packet RAD::     CHAP-Password = 0x00a657c1e0215dc7425ddc0d10bdb558 
12:16:25 radius,debug,packet RAD::       12 
12:16:25 radius,debug,packet RAD::     Calling-Station-Id = "192.168.99.131" 
12:16:25 radius,debug,packet RAD::     NAS-Identifier = "MTFWB1" 
12:16:25 radius,debug,packet RAD::     NAS-IP-Address = 192.168.99.41 
12:16:25 radius,debug,packet RAD:: received bad Access-Accept with id 53 from 192.168.96.29:1812 
12:16:25 radius,debug,packet RAD::     Signature = bad 0x8ad8dbb77653dd83ec2d24a2332d2839 
12:16:25 radius,debug RAD:: received packet for 0d:08 with bad signature, dropping

Anyone know what is going wrong here??

2

Interestingly enough, I also have similar symptoms for dialup VPN connections to the Mikrotik from Microsoft XP boxes using PPTP and MS-CHAP authentication.

3

Your shared secret is incorrect.

4

Caps-lock

:blush:

Thanks.