TMS zl Management and Configuration Guide ST.1.1.100430

10-90
Troubleshooting
Troubleshooting the TMS zl Module in Routing Mode
Figure 10-18.Example IAS Remote Access Policy
Note This error can occur when you set up your remote access policy using a
wizard. The wizard adds attributes to the conditions without your realizing.
Always double-check a policy that you create with a wizard and verify that the
conditions are correct.
• The RADIUS client is unknown or there is a problem with the message
authenticator value.
On IAS, check the client as follows:
i. Open IAS from the Administrative Tools.
ii. Expand Radius Clients. You should see an entry for the TMS zl
Module. (If you do not, create one.)
iii. Edit the entry and check the IP address.
iv. Clear the Message Authenticator check box.
• The user is attempting to authenticate with an authentication method
that is not supported on this remote access policy.
The authentication method set on the client does not match the
method on the RADIUS server. For example, the client cannot use MS-
CHAPv2 authentication (because the TMS zl Module rejects this
setting), but this is the only method allowed by default on an IAS
policy created with a wizard.