Using CHAP with TACACS

[hradhanp]

 Can we use CHAP instead of PAP for device administration. If yes, how we can configure ACS/lSE to achieve this?

[Surendra · Accepted solution]

It is primarily a configuration on the Network Device. On the ISE, you can navigate to Policy > Policy Elements > Results > Authentication > Allowed Protocols, to allow CHAP or any other protocol. On the ACS, it would be Access Policies > [ Click on Access Service Name] > Allowed Protocols

[hradhanp]

Any configuration required on the Network Device? We have already configured the policy in ACS/ISE.

[Surendra]

Configuration depends on the Network Device make and model. Would suggest you check documentation of those devices for the same.

[Abdallah Hagedriss]

I have this problem too and was solved it by:

ACS > Access Policies > Access Service Name > Allowed Protocols