>> Is it possible to make radius tell the dial equipemnt to send the >> password in clear text if it can't authenticate a CHAP password? > No. > In many cases, the NAS can't even control it. The client uses > CHAP, and there's no way for the NAS to tell it to use PAP.
We had a case of a service that proxied to our RADIUS and tried to do CHAP. Our network engineers fixed this by putting the following into the DEFAULT profile for that client: Ascend-Send-Auth = Send-Auth-PAP I cannot speak to what this attribute does or if any special settings were configured on the router. I leave that to someone with a more vested interest in this scenario to figure out. _Mike - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
