topic Re: Using CHAP with TACACS in Network Access Control

Using CHAP with TACACS

hradhanp — Fri, 21 Feb 2020 19:07:50 GMT

Can we use CHAP instead of PAP for device administration. If yes, how we can configure ACS/lSE to achieve this?

Re: Using CHAP with TACACS

Surendra — Tue, 16 Jul 2019 03:33:59 GMT

It is primarily a configuration on the Network Device. On the ISE, you can navigate to Policy > Policy Elements > Results > Authentication > Allowed Protocols, to allow CHAP or any other protocol. On the ACS, it would be Access Policies > [ Click on Access Service Name] > Allowed Protocols

Re: Using CHAP with TACACS

hradhanp — Tue, 16 Jul 2019 07:17:20 GMT

Any configuration required on the Network Device? We have already configured the policy in ACS/ISE.

Re: Using CHAP with TACACS

Surendra — Tue, 16 Jul 2019 07:28:59 GMT

Configuration depends on the Network Device make and model. Would suggest you check documentation of those devices for the same.

Re: Using CHAP with TACACS

Abdallah Hagedriss — Mon, 23 Aug 2021 13:21:30 GMT

I have this problem too and was solved it by:

ACS > Access Policies > Access Service Name > Allowed Protocols