Comments

• According to this article: https://www.sonicwall.com/support/knowledge-base/configuring-l2tp-authentication-protocols-to-use-ldap-instead-of-radius-for-ios-ipad-iphone-ipod-t/170503814012320/ "Active Directory does not support CHAP, MS-CHAP, or MS-CHAPv2" Putting PAP at the top and changing the VPN to use PAP worked for me.

  in NSA 2400 - Cannot successfully authenticate against Active Directory over L2TP VPN Comment by JosephWashington November 2022