The subscriber failed authentication (User authentication failed) — almost always a credentials/security-key mismatch between the UE and the network.
In the Cause IE of a GTPv1-C response (Create PDP Context, Update PDP Context…) on Gn/Gp.
Got a trace with GTPv1 cause 209 User authentication failed? Drop it in the analyzer: it finds the step that really failed first, which node sent the code and what to ask the other side. Captures, test-system PDFs and vendor exports. 5 free analyses a month, no sign-up.
Analyze a trace free