sofether/radius/multiotp/windows client

[cborivant]

Hello,

I'm trying to authenticate my vpn users through a radius server running multiOTP.
The authentication works well but my users can't connect successfully. The are using the windows 10 native client and the vpn is a L2TP vpn with a shared secret.
When they try to connect, I can see in the logs of the radius server that the authentication is OK but the VPN client keeps saying the authentication failed.
Does anyone know what could happen ?

[cborivant]

Ok the problem seems to happen only when using MS-CHAP v2. Using PAP works but is not very secured as the password is send in clear text.

Does anyone know how to make it work with MS-CHAP v2 ?

[solo]

I've changed the type of VPN to Automatic, added the preshared key, and enable PAP and CHAP (even MS-CHAP V2).
After that, the authentication through Windows over IPSec worked perfectly with Radius authentication.

https://www.vpnusers.com/viewtopic.php? ... 9923#p9923