topic HI, in Network Access Control

Cisco Radius Authentication with Windows NAP with Encrypted Authentication

QUARK TARO — Mon, 11 Mar 2019 06:19:16 GMT

I need to setup radius authentication for Cisco IOS devices for device management. My radius server is NAP on Windows 2008 R2.

Can I implement this with encrypted authentication? In the attached diagram, what protocol can I use for encrypted authentication?

According to some sites, we need to enable clear text authentication. Has anyone implemented the secure authentication such as ms chap?

HI,

johnd2310 — Tue, 15 Dec 2015 04:54:14 GMT

HI,

You enable clear text authentication(PAP). Remember radius sends username in the clear but encrypts the password. You can confirm this taking a wireshark capture. You will also secure the radius encryption by using a long and complex radius key.

If you want to encrypt both username and password, then you would use TACACS

Thanks

John