[c-nsp] ms-chap2 for tty auth

[Brian Desmond]

Does anyone know how to enable ms-chapv2 to the RADIUS server for
TTY/Console authentication? It's supported in 12.4 (and maybe 12.3?) for
ppp - "ppp authentication ms-chap-v2" on the interface, but I can't
figure out how or if you can apply this for tty login. Right now I'm
leaning towards not possible.

 

This is the configlet I use for setting up the RADIUS authentication
right now:

 

conf t

aaa new-model

radius-server host 10.1.17.141 auth-port 1812 acct-port 1813 key blah

radius-server host 10.1.17.142 auth-port 1812 acct-port 1813 key blah

ip radius source-interface [SourceInt]

aaa group server radius RadiusServers

 server 10.1.17.141 auth-port 1812 acct-port 1813

 server 10.1.17.142 auth-port 1812 acct-port 1813

exit

aaa authentication login default group RadiusServers local

exit

 

 

 

Thanks,

Brian Desmond

brian at briandesmond.com

 

c - 312.731.3132