Skip to main content
mashhoodahmad
mashhoodahmad
New Member
January 18, 2024
Question

Does FortiAuthenticator v6.6 as a TACACS+ Server support CHAP, MSCHAP and MSCHAPv2 for AAA

  • January 18, 2024
  • 3 replies
  • 1365 views

Dear Community,

 

we have integtrated FACv6.6 as a TACACS server for our Nexus 9K devices with PAP. Now the Team has decided to to enhance the security and want to impletent CHAP, MSCHAP or extentions to it. Before doing any changes in running network.

 

We would like to know/confirm here if FortiAuthenticator as TACACS+ Server does support CHAP/MSCHAP for AAA? Do we need any extra changes need to perform on FAC to activate them.

 

Thanks in Advance

 

Best Regards

3 replies

AEK
SuperUser
AEK
SuperUser
January 18, 2024

Hello

FAC_TACACS.png

Ref:  https://docs.fortinet.com/document/fortiauthenticator/6.6.0/administration-guide/738274/adding-clients

AEK
    mashhoodahmad
    mashhoodahmadAuthor
    New Member
    January 23, 2024

    Hello, 

     

    thank you for the reference, is there any official information about the implementation exists? 

     

    Best Regards,

    pminarik
    Staff
    pminarik
    Staff
    January 23, 2024

    Last time I tried, TAC+ authorization only worked when ASCII authentication was used, so I would restrict my own recommendation to ASCII auth only as long as the TAC+ client supports it.

    Terms & ConditionsAccessibility statement