The VPN or Wi-Fi refuses sign-in (RADIUS Access-Reject or no answer)

Symptom

The VPN client or the Wi-Fi connection says the credentials are wrong, or waits until it gives up.

What the user should check

1. The username is your organization email.
2. The password is the authentication service's password (not Windows', if they differ).
3. In code mode, type the current six-digit code when asked, or password,123456 in one go.
4. In phone mode, approve the request before the VPN gives up.
5. Check your phone's time; see Clock out of sync.

For security, an unknown user, a wrong password, a wrong code and a missing second factor all get the same refusal.

What the administrator should check

Invalid packets or packets from unknown sources are discarded without an answer: the device only sees a timeout.

When to escalate

If the audit shows no decision for the request, the request did not reach the service or was discarded: check the network and, on the shared platform, ask your provider to confirm the allowed address range.