PAP for anyconnect 3.0 to ACS RSA

[r.spiandorello]

Hi, how to move anyconnect authentication method from nschapv2 to pap ?

ASA uses mschapv2 when it talks with ACS 5.3 and ACS 5.3 doesn't want to authenticate with external RSA Manager for MSCHAPv2.

thanks

renato                 

[r.spiandorello]

Pratically, I'm not able to disable ms-chap-v2.

I'm able to select pap,

I'm able to disable chap and ms-chap-v1

but not to disable ms-chap-v2

thanks

[Peter Koltl]

MSCHAPv2 is configured on the ASA:

tunnel-group VPNgr1 general-attributes
  password-management

If password-management is removed, it uses PAP.