cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

228
Views
0
Helpful
1
Replies
paholland
Beginner

Cisco ACS 3.1 Raidus

Can cisco acs3.1 Radius server provide pass-through authentication for NT Domain challenge response

1 REPLY 1
darpotter
Contributor

The simple answer is yes.

The longer answer depends on what protocol you're talking about.

Early versions of ACS supported only PAP and MSCHAPv1 via RADIUS to Windows.

Recent versions (I think 3.1 on) supported MSCHAPv2 which has many security improvements to v1.

Worth noting that the main challenge/response part of the protocol is between the client and the authenticating device. The AAA server see's only the result of the exchange.

Darran

Create
Recognize Your Peers
Content for Community-Ad

ISE Webinars


Miss a previous ISE webinar?
Never miss one again!

CiscoISE on YouTube