Did you ever figure out how to change the authentication method from pap to chap? I see someone responded saying you can, but didn't tell you how. I'm doing some testing, and have a switch setup to use radius. I have the aaa-new model list applied to my console and telnet ports, but they only work if with pap. I don't know how to change the authentication protocol used on the console and telnet ports. Can you change it? Isn't telnet clear text only? If so, what good is radius when trying to account for who has been accessing, and who is allowed to access the cisco equipment via telnet or the console? I don't want active dir domain account's passwords being sent clear text. Is there a better alternative?
thank you,
