IAS and Cisco routers

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

boomboom999@yahoo.com - 25 Jul 2007 18:42 GMT

Hi,

We would like to use MS IAS as a RADIUS server for a centralized
router management.

We were able to make it work perfectly in PAP mode but as this exposes
passwords we would like to use MS CHAP.

When we just switch to MS CHAP (on the router and IAS) the
authentication fails with AUTH_FAILURE. As there is no messages in
Active Directory logs we conclude that the real authentication has
never happened and the request has been rejected by IAS itself.

Has anyone been able to make it work with MS CHAP?
Do we need to activate reverse password encryption in Windows to make
it work?

Any advice will be appreciated

Reply to this Message

S. Pidgorny <MVP> - 26 Jul 2007 09:18 GMT

G'day,

Look for the IAS events in the system log and more detailed information in
the IAS log files (a good log viewer is cheap at
http://www.deepsoftware.com/iasviewer/).

There's only as much that we can help you. Cisco routers aren't all alike -
they have different versions of IOS etc. Switching to PAP was the solution
many years ago - they must be better now...

Signature

Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

> Hi,
>
[quoted text clipped - 14 lines]
>
> Any advice will be appreciated

Reply to this Message