Does FortiAuthenticator v6.6 as a TACACS+ Server support CHAP, MSCHAP and MSCHAPv2 for AAA

[mashhoodahmad]

Dear Community,

we have integtrated FACv6.6 as a TACACS server for our Nexus 9K devices with PAP. Now the Team has decided to to enhance the security and want to impletent CHAP, MSCHAP or extentions to it. Before doing any changes in running network.

We would like to know/confirm here if FortiAuthenticator as TACACS+ Server does support CHAP/MSCHAP for AAA? Do we need any extra changes need to perform on FAC to activate them.

Thanks in Advance

Best Regards

[AEK]

Hello

Ref:  https://docs.fortinet.com/document/fortiauthenticator/6.6.0/administration-guide/738274/adding-clien...

[mashhoodahmad]

Hello, 

thank you for the reference, is there any official information about the implementation exists? 

Best Regards,

[pminarik]

Last time I tried, TAC+ authorization only worked when ASCII authentication was used, so I would restrict my own recommendation to ASCII auth only as long as the TAC+ client supports it.