AAA Server Functions and Concepts
Table 1-2
Authentication Protocol and User Database Compatibility (continued)
Database
RSA
ActivCard
CRYPTOCard
PassGo
Safeword
Vasco
RADIUS Token
Server
Passwords
User Guide for Cisco Secure ACS for Windows Server
1-10
ASCII
PAP CHAP
Yes
Yes
No
Yes
Yes
No
Yes
Yes
No
Yes
Yes
No
Yes
Yes
No
Yes
Yes
No
Yes
Yes
No
Cisco Secure ACS supports many common password protocols:
•
ASCII/PAP
•
CHAP
MS-CHAP
•
•
LEAP
EAP-MD5
•
EAP-TLS
•
PEAP(EAP-GTC)
•
ARAP
•
Passwords can be processed using these password authentication protocols based
on the version and type of security control protocol used (for example, RADIUS
or TACACS+) and the configuration of the AAA client and end-user client. The
following sections outline the different conditions and functions of password
handling.
Chapter 1
MS-
MS-
CHAP
CHAP
ARAP
v.1
v.2
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
Overview of Cisco Secure ACS
EAP
EAP
LEAP
-MD5
-TLS
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
No
78-14696-01, Version 3.1
PEAP
(EAP-
GTC)
Yes
Yes
Yes
Yes
Yes
Yes
Yes