Hi, > The secret key between nas and radius1 is right.
yep. but look a little further down! > rad_recv: Access-Reject packet from host radius2:1645, id=0, length=85 > Received Access-Reject packet from client radius2 port 1645 with invalid > signature (err=2)! (Shared secret is incorrect.) Dropping packet ^^^^^^^^^^^^^^^^^^^^^^^^^^^ which bit of that debug is not clear? the secret key shared between radius1 and radius2 is not set correctly. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html