Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
mashhoodahmad
New Contributor

Does FortiAuthenticator v6.6 as a TACACS+ Server support CHAP, MSCHAP and MSCHAPv2 for AAA

Dear Community,

 

we have integtrated FACv6.6 as a TACACS server for our Nexus 9K devices with PAP. Now the Team has decided to to enhance the security and want to impletent CHAP, MSCHAP or extentions to it. Before doing any changes in running network.

 

We would like to know/confirm here if FortiAuthenticator as TACACS+ Server does support CHAP/MSCHAP for AAA? Do we need any extra changes need to perform on FAC to activate them.

 

Thanks in Advance

 

Best Regards

3 REPLIES 3
AEK
Honored Contributor II

AEK
mashhoodahmad
New Contributor

Hello, 

 

thank you for the reference, is there any official information about the implementation exists? 

 

Best Regards,

pminarik
Staff
Staff

Last time I tried, TAC+ authorization only worked when ASCII authentication was used, so I would restrict my own recommendation to ASCII auth only as long as the TAC+ client supports it.

[ corrections always welcome ]
Labels
Top Kudoed Authors