cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1685
Views
0
Helpful
2
Replies

MSCHAPv2 for telnet authentication via IAS

kbrookov
Level 1
Level 1

Hello,

Is there any way to get the cisco router to use MSCHAPv2 for telnet/enable authentication?

What I have set up now:

aaa new-model

aaa authentication login telnet group radius enable

enable secret xxxxxxxxxx

enable password test

radius-server host XXXXXXXXX auth-port 1812 acct-port 1813

radius-server key ciscotest

Thanks,

2 Replies 2

aschiebe
Level 1
Level 1

MSCHAPv2 is a way of authentication for PPP connections between a computer using a Microsoft Windows operating system and a network access server (NAS).

Therefore , using MSCHAPv2 for telnet/enable authentication isn't possible (Only PPP connections)

This would be for the following command:

line vty 0 4

login authentication telnet

trying to use a Micorosoft IAS server with active directory to authenticate login attempts on a cisco router. I get an error message on the IAS server that the router is using PAP authentication. There is no way to force the router to use CHAP in this scenerio?