Technical Tip: User cannot authenticate with error 'Received packet from x.x.x.x with invalid Message-Authenticator! (Shared secret is incorrect.) (from client x.x.x.x)'

Description

This article describes how to solve an issue where authentication fails with the error 'Shared secret is incorrect' while trying to integrate a Huawei switch in FortiNAC.

Scope

FortiNAC-F.

Solution

In this scenario, there is an issue integrating Huawei Switch S6730 with FortiNAC.

A switch has been added to the inventory and a RADIUS secret has been configured.

Testing RADIUS authentication shows the following error:

Info: Dropping packet without response because of error: Received packet from x.x.x.x with invalid Message-Authenticator! (Shared secret is incorrect.) (from client x.x.x.x)

Checking from the database shows that the correct secret is applied but logs keep saying 'Shared secret is incorrect'.

To overcome this issue, RADIUS configuration needs to be re-applied again.

Go to the Inventory and select the switch. Right-click and select 'Set Model Configuration' -> add 'Detailed Configuration' as below:

Next, choose 'Detail Configuration' and a tab with the same name will appear on the right:

After choosing the 'Detail Configuration' option, re-apply the RADIUS settings again as shown below: