Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

802.1x authentication switch and AD


I want to know if Cisco has solved the problem (MD5) between ACS and Active Directory?? because I want to configure 802.1x in a switch and it will integrate with Active Directory (Data Base)

The Solution is:

Switch <--> ACS (Authentication)<--> AD (Data Base)

Also i want to know if exist any solution no NAC Appliance that can use 802.1x integrate with AD in switch infraestructure??

Best Regards

  • AAA Identity and NAC

Re: 802.1x authentication switch and AD

MD5 between ACS and AD ? If you want to use AD then you need to use MSCHAP since MD5 is not supported by AD.

Here is the compatibility chart,



Do rate helpful posts

Re: 802.1x authentication switch and AD

then ... this work?? if is yes, please could you send me a example??

Best regards


Re: 802.1x authentication switch and AD

NAC appliance does not use 802.1x. They are independent of each other. I've never personally configured both for the same site so I wouldn't know what to expect if you did.

New Member

Re: 802.1x authentication switch and AD

I have hit the same challenge, where I need to authenticate the users against AD and I don't want to use the local CiscoSecure Database in ACS. For hundreds of users, there is no way I'm going to manage a database in ACS for user access. I have to manage the users in AD. I opened a case with Cisco and MS-CHAP is not supported by Cisco ACS, as I was provided this URL link:

Additionally, I was directed to the URL:

I'm so stuck...there has to be way to use IEEE 802.1x with an external database such as LDAP.

New Member

Re: 802.1x authentication switch and AD

from what I am reading, it looks like you would set up the ACS as the radius server to authenticate to Active Directory. In this instance you still manage the users with Active Directory.


Alex Pfeil

This widget could not be displayed.