When using the Okta RADIUS agent to authenticate users to Cisco Meraki, the following error is displayed in the Okta RADIUS log.

YYYY-MM-DD HH:MM:SS UTC [01, pool-2-thread-13] : ERROR - malformed RADIUS packet. Exception message: Access-Request: User-Password or CHAP-Password/CHAP-Challenge missing

• Okta RADIUS agent
• Cisco Meraki
• Challenge Handshake Authentication Protocol (CHAP)

The Okta RADIUS agent does not support CHAP for authentication.

Cisco Meraki must be configured to use Password Authentication Protocol (PAP) with the Okta RADIUS agent.

Keep in mind that the Meraki cloud must be able to communicate with the RADIUS servers via the Internet.

Please make sure that:

• The RADIUS servers have public IP addresses (i.e.,are reachable on the Internet)
• The firewall, if any, allows incoming traffic to the RADIUS servers
• Allowlist IP addresses as clients on the RADIUS server as per the Help > Firewall info page within the Meraki dashboard.

Refer to the Configure Cisco Meraki document for additional information.

Related References

• Configure Cisco Meraki
• About the Okta RADIUS Agent and Application