1. Home
  2. Cisco Systems
  3. radius authentication

radius authentication

Hi all, I'm trying to use radius authentication for testing and I have observed that if I use a CHAP request with my client it overrides the secret key ( shared ): it means that I can write wrong key with correct account and the authentication WORKS.

If I use PAP method ther is no problem because I MUST put the correct shared key and authentication doesn't work with wrong key.

I think this is a normal behaviour but I cannot find this in Radius RFC.

Does anyone know if this behaviour is correct ?

thanks in advance Loris

Reply to
l.cardullo
Loading thread data ...

Hi,

In case of PAP the "password" field is encrypted using the secret key. If the secret key does not match the radius server will never have the right password.

CHAP and MsChap do not use the "password" field like PAP. Hence the secret key isnt used > Hi all,

Reply to
hellboy

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.