<html><head><meta http-equiv="Content-Type" content="text/html; charset=us-ascii"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">Hi,<div class=""><br class=""></div><div class="">I've managed to get so far with trying to implement a strongSwan VPN server with MFA similar to what Azure do <a href="https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfaserver-dir-radius" class="">https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfaserver-dir-radius</a> but I get stuck with using EAP.  As commented by Azure :</div><div class=""><p style="margin: 8px 0px 0px; max-width: 100%; font-family: "Segoe UI", SegoeUI, "Segoe WP", "Helvetica Neue", Helvetica, Tahoma, Arial, sans-serif; font-size: 16px; font-variant-ligatures: normal; orphans: 2; widows: 2;" class="">The MFA Server only supports PAP (password authentication protocol) and MSCHAPv2 (Microsoft's Challenge-Handshake Authentication Protocol) RADIUS protocols when acting as a RADIUS server. Other protocols, like EAP (extensible authentication protocol), can be used when the MFA server acts as a RADIUS proxy to another RADIUS server that supports that protocol.</p></div><div class=""><br class=""></div><div class="">This is what I have so far with strongSwan and freeradius log below.  I have freeradius configured with google-authenticator using PAM using this guide <a href="http://www.supertechguy.com/help/security/freeradius-google-auth" class="">http://www.supertechguy.com/help/security/freeradius-google-auth</a> which works when testing from localhost, but I think the EAP from the VPN is not sending through the password or at least it is but in md4.</div><div class=""><br class=""></div><div class="">Has anyone managed to set up a VPN server with MFA?</div><div class=""><br class=""></div><div class=""><pre style="background-color: rgb(255, 255, 255); font-family: Menlo; font-size: 9pt;" class=""><span style="font-weight:bold;" class="">#!/bin/bash<br class=""></span><span style="font-weight:bold;" class=""><br class=""></span>sed -i <span style="color:#008000;font-weight:bold;" class="">'s/#NTP=/NTP=169.254.169.123/' </span>/etc/systemd/timesyncd.conf<br class=""><br class=""><span style="color:#808080;font-style:italic;" class=""># apt answers<br class=""></span><span style="color:#0b0c95;" class="">echo </span>iptables-persistent iptables-persistent/autosave_v4 boolean true | sudo debconf-set-selections<br class=""><span style="color:#0b0c95;" class="">echo </span>iptables-persistent iptables-persistent/autosave_v6 boolean true | sudo debconf-set-selections<br class=""><br class=""><span style="color:#808080;font-style:italic;" class=""># install dependencies<br class=""></span>apt-get install -y build-essential libsystemd-dev pkg-config iptables-persistent<br class=""><br class=""><span style="color:#808080;font-style:italic;" class=""># install strongswan<br class=""></span>wget -nv <a href="https://download.strongswan.org/strongswan-5.6.3.tar.bz2" class="">https://download.strongswan.org/strongswan-5.6.3.tar.bz2</a><br class="">tar xjf strongswan-5.6.3.tar.bz2; <span style="color:#0b0c95;" class="">cd </span>strongswan*<br class="">./configure --prefix=/usr --sysconfdir=/etc \<br class="">  --enable-systemd --enable-swanctl \<br class="">  --disable-charon --disable-stroke --disable-scepclient \<br class="">  --enable-eap-identity --enable-eap-mschapv2 --enable-md4 \<br class="">  --enable-eap-radius<br class="">make<br class="">make install<br class=""><br class=""># configure strongswan<br class="">cat <span style="color:#5a5a5a;font-style:italic;" class=""><<</span><span style="color:#000080;font-weight:bold;" class="">'EOF' </span><span style="color:#5a5a5a;font-style:italic;" class="">> /etc/strongswan.d/charon/eap-radius.conf<br class=""></span><span style="background-color:#e7ffb3;" class="">eap-radius {<br class=""></span><span style="background-color:#e7ffb3;" class="">    load = yes<br class=""></span><span style="background-color:#e7ffb3;" class="">    accounting = yes<br class=""></span><span style="background-color:#e7ffb3;" class="">    nas_identifier = vpn-server-1<br class=""></span><span style="background-color:#e7ffb3;" class="">    servers {<br class=""></span><span style="background-color:#e7ffb3;" class="">        primary {<br class=""></span><span style="background-color:#e7ffb3;" class="">            address = 172.31.19.90  # TODO: change to DNS<br class=""></span><span style="background-color:#e7ffb3;" class="">            secret = KFdHr0sgw$kOfFgh  # /etc/freeradius/clients.conf<br class=""></span><span style="background-color:#e7ffb3;" class="">        }<br class=""></span><span style="background-color:#e7ffb3;" class="">    }<br class=""></span><span style="background-color:#e7ffb3;" class="">    xauth {<br class=""></span><span style="background-color:#e7ffb3;" class="">        pinprofile {<br class=""></span><span style="background-color:#e7ffb3;" class="">            nextpin = Please enter the next Code from your scratch list:<br class=""></span><span style="background-color:#e7ffb3;" class="">        }<br class=""></span><span style="background-color:#e7ffb3;" class="">        passandcode {<br class=""></span><span style="background-color:#e7ffb3;" class="">            password = Please enter your password:<br class=""></span><span style="background-color:#e7ffb3;" class="">            passcode = Please enter multi-factor authentication code:<br class=""></span><span style="background-color:#e7ffb3;" class="">        }<br class=""></span><span style="background-color:#e7ffb3;" class="">    }<br class=""></span><span style="background-color:#e7ffb3;" class="">}<br class=""></span><span style="color:#000080;font-weight:bold;" class="">EOF<br class=""></span><span style="color:#000080;font-weight:bold;" class=""><br class=""></span><span style="color:#000080;font-weight:bold;" class=""><br class=""></span>cat <span style="color:#5a5a5a;font-style:italic;" class=""><<</span><span style="color:#000080;font-weight:bold;" class="">'EOF' </span><span style="color:#5a5a5a;font-style:italic;" class="">> /etc/swanctl/conf.d/conn-radius.conf<br class=""></span><span style="background-color:#e7ffb3;" class="">connections {<br class=""></span><span style="background-color:#e7ffb3;" class="">  radius {<br class=""></span><span style="background-color:#e7ffb3;" class="">     version = 2<br class=""></span><span style="background-color:#e7ffb3;" class="">     send_cert = always<br class=""></span><span style="background-color:#e7ffb3;" class="">     encap = yes<br class=""></span><span style="background-color:#e7ffb3;" class="">     pools = pool1<br class=""></span><span style="background-color:#e7ffb3;" class="">     unique = replace<br class=""></span><span style="background-color:#e7ffb3;" class="">     proposals = aes256-sha256-prfsha256-ecp256-modp2048<br class=""></span><span style="background-color:#e7ffb3;" class="">     local {<br class=""></span><span style="background-color:#e7ffb3;" class="">        id = vpnserver<br class=""></span><span style="background-color:#e7ffb3;" class="">        certs = vpnserver.crt<br class=""></span><span style="background-color:#e7ffb3;" class="">     }<br class=""></span><span style="background-color:#e7ffb3;" class="">     remote {<br class=""></span><span style="background-color:#e7ffb3;" class="">        auth = eap-radius<br class=""></span><span style="background-color:#e7ffb3;" class="">        eap_id = %any<br class=""></span><span style="background-color:#e7ffb3;" class="">     }<br class=""></span><span style="background-color:#e7ffb3;" class="">     remote-1 {<br class=""></span><span style="background-color:#e7ffb3;" class="">        auth = xauth-radius:pinprofile<br class=""></span><span style="background-color:#e7ffb3;" class="">     }<br class=""></span><span style="background-color:#e7ffb3;" class="">     children {<br class=""></span><span style="background-color:#e7ffb3;" class="">        net {<br class=""></span><span style="background-color:#e7ffb3;" class="">          local_ts = 172.31.0.0/16<br class=""></span><span style="background-color:#e7ffb3;" class="">        }<br class=""></span><span style="background-color:#e7ffb3;" class="">     }<br class=""></span><span style="background-color:#e7ffb3;" class="">  }<br class=""></span><span style="background-color:#e7ffb3;" class="">}<br class=""></span><span style="color:#000080;font-weight:bold;" class="">EOF<br class=""></span></pre></div><div class=""><br class=""></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">The freeradius server log has the following:</div><div class=""><br class=""></div><div class=""><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255); min-height: 13px;" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""></span><br class=""></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">rad_recv: Access-Request packet from host 172.31.19.40 port 56472, id=44, length=140</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre">      </span>User-Name = "test"</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre">       </span>NAS-Port-Type = Virtual</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre">    </span>Service-Type = Framed-User</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>NAS-Port = 4</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre">       </span>NAS-Port-Id = "radius"</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre">   </span>NAS-IP-Address = 172.31.19.40</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre">      </span>Called-Station-Id = "172.31.19.40[4500]"</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>Calling-Station-Id = "148.252.225.26[46452]"</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre">     </span>EAP-Message = 0x020000090174657374</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>NAS-Identifier = "vpn-server-1"</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre">  </span>Message-Authenticator = 0x38b1665e5c973bce156a9b8ec63d40a0</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: # Executing section authorize from file /etc/freeradius/sites-enabled/default</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: +group authorize {</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: ++[preprocess] = ok</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: ++[chap] = noop</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: ++[mschap] = noop</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: ++[digest] = noop</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: [suffix] No '@' in User-Name = "test", looking up realm NULL</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: [suffix] No such realm "NULL"</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: ++[suffix] = noop</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: [eap] EAP packet type response id 0 length 9</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: [eap] No EAP Start, assuming it's an on-going EAP conversation</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: ++[eap] = updated</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: [files] users: Matched entry DEFAULT at line 1</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: ++[files] = ok</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: ++[expiration] = noop</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: ++[logintime] = noop</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: [pap] WARNING! No "known good" password found for the user.  Authentication may fail because of this.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: ++[pap] = noop</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: +} # group authorize = updated</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: Found Auth-Type = PAM</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: # Executing group from file /etc/freeradius/sites-enabled/default</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: +group authenticate {</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><b class="">Mon Jul  9 15:29:42 2018 : Auth: rlm_pam: Attribute "User-Password" is required for authentication.</b></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: ++[pam] = invalid</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: +} # group authenticate = invalid</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: Failed to authenticate the user.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Auth: Login incorrect: [test] (from client local port 4 cli 148.252.225.26[46452])</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: Using Post-Auth-Type Reject</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: # Executing group from file /etc/freeradius/sites-enabled/default</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: +group REJECT {</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: [eap] Request was previously rejected, inserting EAP-Failure</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: ++[eap] = updated</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: [attr_filter.access_reject] <span class="Apple-tab-span" style="white-space:pre">   </span>expand: %{User-Name} -> test</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Debug: attr_filter: Matched entry DEFAULT at line 11</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: ++[attr_filter.access_reject] = updated</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: +} # group REJECT = updated</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Info: Delaying reject of request 0 for 1 seconds</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Debug: Going to the next request</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:42 2018 : Debug: Waking up in 0.9 seconds.</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class="">Mon Jul  9 15:29:43 2018 : Info: Sending delayed reject for request 0</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><b class="">Sending Access-Reject of id 44 to 172.31.19.40 port 56472</b></span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre"> </span>EAP-Message = 0x04000004</span></div><div style="margin: 0px; font-stretch: normal; font-size: 11px; line-height: normal; font-family: Menlo; background-color: rgb(255, 255, 255);" class=""><span style="font-variant-ligatures: no-common-ligatures" class=""><span class="Apple-tab-span" style="white-space:pre">   </span>Message-Authenticator = 0x00000000000000000000000000000000</span></div></div><div class=""><br class=""></div><div class=""><br class=""></div><div class="">Kind regards,.</div><div class="">Christian</div></body></html>