I'll check into this. MSCHAPv2 would be very cool, I've wondered for quite awhile why the switches weren't capable of the newer auth methods.
On Feb 14, 2013, at 7:33 AM, "Rob Yamry" <[email protected]<mailto:[email protected]>> wrote: I dont have any G3s here so I cant comment on that, but with my C- and K-Series I only use radius for management access and I only use MSCHAPv2. -Rob --- Rob Yamry | Network Engineer | Kimberly Area School District | Phone: 920.788.7900 x 4158 | Direct: 920.423.4158 | [email protected]<mailto:[email protected]> On Thu, Feb 14, 2013 at 7:29 AM, <[email protected]<mailto:[email protected]>> wrote: To authenticate user and end-point, we can use MSCHAP v2 but for the “management access”, only PAP works. On our G3 we use the v6.61. thanks Geoffroy HUGUENIN CEA VALDUC VA/DSTA/STLI/LSIS 21120 IS-SUR-TILLE Téléphone : 03 80 23 77 80 De : Rob Yamry [mailto:[email protected]<mailto:[email protected]>] Envoyé : jeudi 14 février 2013 14:25 À : Enterasys Customer Mailing List Objet : Re: [enterasys] Radius management access with CHAP Check which firmware you are on. I know that with the C-Series v6.41 (if I recall correctly) and below only supported PAP/CHAP. Im not 100% as to which version enabled MSCHAPv2 support, but I had to upgrade all of my switches to v6.61 to get that functionality. I use NPS as well. -Rob --- Rob Yamry | Network Engineer | Kimberly Area School District | Phone: 920.788.7900 x 4158<tel:920.788.7900%20%C2%A0x%204158> | Direct: 920.423.4158<tel:920.423.4158> | [email protected]<mailto:[email protected]> On Thu, Feb 14, 2013 at 5:53 AM, Patrick Printz <[email protected]<mailto:[email protected]>> wrote: We use mschap v2 with our Enterasys gear; it should work fine. The switch just passes along the info to NPS, which is authenticating the end-point. Patrick Printz Network Infrastructure Quinsigamond Community College 670 West Boylston Street Worcester, MA 01606-2092 w. 508-854-7517<tel:508-854-7517> c. 508-726-9529<tel:508-726-9529> "If a man is called a street sweeper, he should sweep streets even as Michelangelo painted, or Beethoven composed music, or Shakespeare wrote poetry. He should sweep streets so well that all the hosts of heaven and Earth will pause to say, Here lived a great street sweeper who did his job well." ~Martin Luther King, Jr. From: [email protected]<mailto:[email protected]> [mailto:[email protected]<mailto:[email protected]>] Sent: Thursday, February 14, 2013 4:04 AM To: Enterasys Customer Mailing List Subject: [enterasys] Radius management access with CHAP Hi, We change our radius server from Freeradius to NPS on windows 2008 R2. The authentication method is PAP (like freeradius). The system administrator want to use CHAP because of the clear password with PAP. NPS gives MS-CHAP (v1 or v2), CHAP, PAP and SPAP. But switches don’t offer this choice, it seems ! I don’t see anything about CHAP or anything else on the Enterasys knowledgebase. Do you know if it’s possible to use another protocol with the “management access” for radius ? Best regards Geoffroy HUGUENIN CEA VALDUC VA/DSTA/STLI/LSIS 21120 IS-SUR-TILLE Téléphone : 03 80 23 77 80 * --To unsubscribe from enterasys, send email to [email protected]<mailto:[email protected]> with the body: unsubscribe enterasys [email protected]<mailto:[email protected]> * --To unsubscribe from enterasys, send email to [email protected]<mailto:[email protected]> with the body: unsubscribe enterasys [email protected]<mailto:[email protected]> * --To unsubscribe from enterasys, send email to [email protected]<mailto:[email protected]> with the body: unsubscribe enterasys [email protected]<mailto:[email protected]> * --To unsubscribe from enterasys, send email to [email protected]<mailto:[email protected]> with the body: unsubscribe enterasys [email protected]<mailto:[email protected]> * --To unsubscribe from enterasys, send email to [email protected]<mailto:[email protected]> with the body: unsubscribe enterasys [email protected]<mailto:[email protected]> --- To unsubscribe from enterasys, send email to [email protected] with the body: unsubscribe enterasys [email protected]
