thanks. There is a bug in 12.2.1 IOS that wouldn't let me connect via PAP, CHAP or MS-CHAP. Now that I'm using 12.1.5T7, It's working better although if I use Ms-chap, it lets me in but wouldn't let me ping anything unless I disable PPP ENCRYPT MPPE which is not desireable at all. I'm going to have to use plain CHAP for this. ""michael liu"" wrote in message [EMAIL PROTECTED]">news:[EMAIL PROTECTED]... > First check your router IOS version, only Enterprise version support > ms-chap?What kind of radius server you use? I use Microsoft radius server > with support ms-chap.enable debug aaa authen will give you enough info. > about radius authentication info. Good Luck, ~ml > > ------------------------------------------------------------------------ > > Get your FREE download of MSN Explorer at http://explorer.msn.com Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=8671&t=8671 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]