Cisco Radius Authentication with Windows NAP with Encrypted Authentication

[QUARK TARO]

I need to setup radius authentication for Cisco IOS devices for device management. My radius server is NAP on Windows 2008 R2. 

Can I implement this with encrypted authentication? In the attached diagram, what protocol can I use for encrypted authentication?

According to some sites, we need to enable clear text authentication. Has anyone implemented the secure authentication such as ms chap?

[johnd2310 · Accepted solution]

HI,

You enable clear text authentication(PAP). Remember radius sends username in the clear but  encrypts the password. You can confirm this taking a wireshark capture. You will also secure the radius encryption by using a long and complex radius key.

If you want to encrypt both username and password,  then you would use TACACS

Thanks

John