AnyConnect and MSChap-V2 on Microsoft Raidus with ASA5510

[dallen0]

Hello...

We have a Cisco ASA5510 configured to work with Microsoft Radius Server.  VPN authorization and authentication is working well with L2TP over IPSec, and users are authenticating with MSChapV2 like we want them to.

Now we are trying to setup Anyconnnect to do the same.  How do we tell AnyConnect to use MSChap-V2 versus PAP? using ADSM?  I think I know how to do the Microsoft Part of it, but I don't know where to go in ADSM to configure this.

Any advise is welcomed....

Dale

[Gustavo Medina · Accepted solution]

Hello Dale,

You need to use the following command under the tunnel-group to force the use of MSChapv2.

password-management

On ASDM:

[dallen0]

That certainly worked.

Thanks a lot!

Dale