Make sure that Direction on the remote server is set to Incoming and Outgoing or Incoming, and that the direction on the authentition forwarding server is set to Incoming and Outgoing or Outgoing.
Shared secret (key) matches the shared secret of one or both ACSs.
Character string and delimiter match the stripping information configured in the Proxy Distribution table, and the position is set correctly to Prefix or Suffix.