I have recently installed ACS v3.1. I can successfully authenticate users using chap, but when I add the aaa authenication ppp default group tacacs+ command to my router(authen'ing using my NT Database) and debug it says that authentication fails. I am running IOS 12.2(2)XT. It will however, successfully authenicate me when logging into a AAA client using the aaa authentication login default group tacacs+ local command, so it appears that the authentication process is working. Any suggestions on how to authenticate my dialup users(via ACS/NT Database)? Everything appears to be configured right on the router. My guess is something in ACS is not configured properly to pass the the authen. from the ACS to the NT Database(DC) for the dialup users. Any suggestions would be appreciated.
