Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
443
Views
0
Helpful
1
Replies

Forcing successful chap authentication for old tacacs users

pierlu
Level 1
Level 1

‎02-06-2007 02:57 PM

We have a NT4.0 tacacs+ ACS server that we want to turn off, permitting connections with blank usernames and passwords (or fictious). Our clients actually connect to us via PPP/ISDN with a username/password pair, in chap. Is it possible to disable ppp chap processing from our IOS 12.2 3600, forcing an always-true auth? The command "aaa authentication ppp default none" permits Windows RAS users to authenticate with every username/password, but Cisco users cannot complete the PPP LCP phase.

Labels:
0 Helpful
1 Reply 1

Richard Burts
Hall of Fame
Hall of Fame

‎02-07-2007 04:40 AM

Pierluigi

I am not understanding well your problem. If you do not want to authenticate then it seems that aaa authentication ppp default none should achieve that, unless you have configured some different authentication method for your PPP. Perhaps if you post the configuration of the router we might be better able to identify the issue.

It might also be helpful to have the output of debug ppp negotiation and debug ppp authenticat.

HTH

Rick

HTH

Rick
0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents