Using Microsoft IAS to autheticate Cisco VTY sessions.

[saitkenhead]

Recently configured Microsoft RADIUS to authenticate VTY users for our Cisco devices.The goal was to authenticate using Active directory domain groups. Everthing works great when we specify PAP as authentication method in RAS policy but when we try to authenticate using EAP or other secure methods it does not work. How do we specify aaa authetication to use EAP on switch so this will work?

Thanks in advance.

[Edison Ortiz]

With RADIUS, you can only use PAP or CHAP - EAP is not supported.

http://www.cisco.com/univercd/cc/td/doc/product/software/ios124/124cg/hsec_c/part05/ch05/schathen.htm#wp1002457

[saitkenhead]

Thanks for the quick response!

When I set authentication to CHAP on Radius server it fails. Is there a command I need to set on the 3560 switch to force CHAP authentication?

[saitkenhead]

I found this link maybe it'll shed some light on this problem.

http://www.cisco.com/en/US/tech/tk59/technologies_tech_note09186a0080093f4b.shtml