Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

ACS error - Authentication type not supported by External DB

I am struggling to authenticate via our private 3G APN. Basically I connect to our company APN, then authentication to connect to the APN then gets relayed via the following server until it reaches our AD server which then respond. From our ISP which provides the APN the authentication request gets relayed via there Radius servers to our Cisco ACS server, our ACS server then sends the request to the AD server which then needs to respond to the request. But on the ACS I get the following error: Authentication type not supported by External DB.

Please can someone assist me?

1 ACCEPTED SOLUTION

Accepted Solutions
Silver

Re: ACS error - Authentication type not supported by External DB

What authentication protocol are you running?

The error you're getting says that the authentication protocol is not supported by the backend db that ACS is talking to.

For example, you cannot use CHAP against Windows/AD. Likewise you cant do MSCHAP against a generic LDAP backend.

Looking at a trace of the RADIUS packets will tell you what protocol is being used. Probably CHAP as it not working.

Darran

2 REPLIES
Silver

Re: ACS error - Authentication type not supported by External DB

What authentication protocol are you running?

The error you're getting says that the authentication protocol is not supported by the backend db that ACS is talking to.

For example, you cannot use CHAP against Windows/AD. Likewise you cant do MSCHAP against a generic LDAP backend.

Looking at a trace of the RADIUS packets will tell you what protocol is being used. Probably CHAP as it not working.

Darran

New Member

Re: ACS error - Authentication type not supported by External DB

Thank you very much Darren, you where spot on. I changed the authentication type and it is working now!

:-)

1997
Views
0
Helpful
2
Replies
CreatePlease login to create content