HP AP775A Cisco Nexus 5000 Series Switch CLI Software Configuration Guide (OL- - Page 281

Configuring AAA Enabling MSCHAP Authentication Step 5 Command or Action switch# copy running-config startup-config Purpose (Optional) Copies the running configuration to the startup configuration. Enabling MSCHAP Authentication Microsoft Challenge Handshake Authentication Protocol (MSCHAP) is the Microsoft version of CHAP. You can use MSCHAP for user logins to a Cisco Nexus 5000 Series switch through a remote authentication server (RADIUS or TACACS+). By default, the Cisco Nexus 5000 Series switch uses Password Authentication Protocol (PAP) authentication between the switch and the remote server. If you enable MSCHAP, you need to configure your RADIUS server to recognize the MSCHAP vendor-specific attributes (VSAs). The following table describes the RADIUS VSAs required for MSCHAP. Table 23: MSCHAP RADIUS VSAs Vendor-ID Number 311 Vendor-Type Number 11 VSA MSCHAP-Challenge Description Contains the challenge sent by an AAA server to an MSCHAP user. It can be used in both Access-Request and Access-Challenge packets. 211 11 MSCHAP-Response Contains the response value provided by an MSCHAP user in response to the challenge. It is only used in Access-Request packets. To enable MSCHAP authentication, perform this task: Procedure Step 1 Step 2 Step 3 Command or Action switch# configure terminal Purpose Enters configuration mode. switch(config)# aaa authentication login Enables MS-CHAP authentication. The default mschap enable is disabled. switch(config)# exit Exits configuration mode. OL-16597-01 Cisco Nexus 5000 Series Switch CLI Software Configuration Guide 235