About Enabling Mschap; Enabling Mschap Authentication - Cisco AP775A - Nexus Converged Network Switch 5010 Configuration Manual

Chapter 41 Configuring RADIUS and TACACS+
S e n d d o c u m e n t a t i o n c o m m e n t s t o m d s f e e d b a c k - d o c @ c i s c o . c o m

About Enabling MSCHAP

By default, the switch uses Password Authentication Protocol (PAP) authentication between the switch
and the remote server. If you enable MSCHAP, you need to configure your RADIUS server to recognize
the MSCHAP vendor-specific attributes. See the
page
Table 41-1 MSCHAP RADIUS Vendor-Specific Attributes
Vendor-ID
Number Vendor-Type Number
311 11
211 11

Enabling MSCHAP Authentication

To enable MSCHAP authentication using Device Manager, follow these steps:
Step 1 Click Security > AAA.
You see the AAA configuration in the Information pane as shown in
Figure 41-8
Click the General tab.
Step 2
You see the MSCHAP configuration as shown in
Figure 41-9
Check the AuthTypeMSCHAP check box to use MSCHAP to authenticate users on the switch.
Step 3
OL-17256-03, Cisco MDS NX-OS Release 4.x
41-13. Table 41-1 shows the RADIUS vendor-specific attributes required for MSCHAP.
Vendor-Specific Attribute
MSCHAP-Challenge
MSCHAP-Response
AAA Configuration in Device Manager
MSCHAP Configuration
"About Vendor-Specific Attributes" section on
Description
Contains the challenge sent by an AAA server to an
MSCHAP user. It can be used in both
Access-Request and Access-Challenge packets.
Contains the response value provided by an
MS-CHAP user in response to the challenge. It is
only used in Access-Request packets.
Figure 41-9.
Cisco MDS 9000 Family Fabric Manager Configuration Guide
MSCHAP Authentication
Figure 41-8.
41-25