I dont have any G3s here so I cant comment on that, but with my C- and K-Series I only use radius for management access and I only use MSCHAPv2.
-Rob --- Rob Yamry | Network Engineer | Kimberly Area School District | Phone: 920.788.7900 x 4158 | Direct: 920.423.4158 | [email protected] On Thu, Feb 14, 2013 at 7:29 AM, <[email protected]> wrote: > To authenticate user and end-point, we can use MSCHAP v2 but for the > “management access”, only PAP works.**** > > On our G3 we use the v6.61.**** > > thanks**** > > ** ** > > *Geoffroy HUGUENIN***** > > CEA VALDUC**** > > VA/DSTA/STLI/LSIS**** > > 21120 IS-SUR-TILLE**** > > Téléphone : 03 80 23 77 80**** > > *De :* Rob Yamry [mailto:[email protected]] > *Envoyé :* jeudi 14 février 2013 14:25 > *À :* Enterasys Customer Mailing List > *Objet :* Re: [enterasys] Radius management access with CHAP**** > > ** ** > > Check which firmware you are on. I know that with the C-Series v6.41 (if I > recall correctly) and below only supported PAP/CHAP. Im not 100% as to > which version enabled MSCHAPv2 support, but I had to upgrade all of my > switches to v6.61 to get that functionality. I use NPS as well.**** > > ** ** > > -Rob**** > > > **** > > > --- > Rob Yamry | Network Engineer | Kimberly Area School District | > Phone: 920.788.7900 x 4158 | Direct: 920.423.4158 | > [email protected]**** > > ** ** > > On Thu, Feb 14, 2013 at 5:53 AM, Patrick Printz <[email protected]> > wrote:**** > > We use mschap v2 with our Enterasys gear; it should work fine. The switch > just passes along the info to NPS, which is authenticating the end-point. > **** > > **** > > *Patrick Printz***** > > *Network Infrastructure***** > > **** > > Quinsigamond Community College > 670 West Boylston Street > Worcester, MA 01606-2092 **** > > w. 508-854-7517**** > > c. 508-726-9529**** > > **** > > **** > > "If a man is called a street sweeper, he should sweep streets even as > Michelangelo painted, or Beethoven composed music, or Shakespeare wrote > poetry. He should sweep streets so well that all the hosts of heaven and > Earth will pause to say, Here lived a great street sweeper who did his job > well."**** > > ~Martin Luther King, Jr. **** > > **** > > *From:* [email protected] [mailto:[email protected]] > *Sent:* Thursday, February 14, 2013 4:04 AM > *To:* Enterasys Customer Mailing List > *Subject:* [enterasys] Radius management access with CHAP**** > > **** > > Hi,**** > > We change our radius server from Freeradius to NPS on windows 2008 R2. The > authentication method is PAP (like freeradius). The system administrator > want to use CHAP because of the clear password with PAP.**** > > NPS gives MS-CHAP (v1 or v2), CHAP, PAP and SPAP. But switches don’t offer > this choice, it seems !**** > > **** > > I don’t see anything about CHAP or anything else on the Enterasys > knowledgebase.**** > > **** > > Do you know if it’s possible to use another protocol with the “management > access” for radius ?**** > > **** > > Best regards**** > > **** > > *Geoffroy HUGUENIN***** > > CEA VALDUC**** > > VA/DSTA/STLI/LSIS**** > > 21120 IS-SUR-TILLE**** > > Téléphone : 03 80 23 77 80**** > > - --To unsubscribe from enterasys, send email to [email protected] with > the body: unsubscribe enterasys [email protected] **** > > > - --To unsubscribe from enterasys, send email to [email protected] with > the body: unsubscribe enterasys [email protected] **** > > ** ** > > - --To unsubscribe from enterasys, send email to [email protected] with > the body: unsubscribe enterasys [email protected] **** > > > - --To unsubscribe from enterasys, send email to [email protected] with > the body: unsubscribe enterasys [email protected] > > --- To unsubscribe from enterasys, send email to [email protected] with the body: unsubscribe enterasys [email protected]
