I agree that the RADIUS server policy is rejecting the request. You have have a look at the policy settings in KB22482. this is for an older version of Microsoft RADIUS but the settings are still the same.
http://kb.juniper.net/InfoCenter/index?page=content&id=KB22482