Cisco 1113 4.2 maximum RADIUS registers

Question

Hello
My customer has two Cisco ACS 1113 appliances, version ACS-4.2.1.15.10-Fix. They want to know the maximum number of devices that can be registered on RADIUS.
Do you know any document of official Cisco page where such info can be found?
Thanks in advance.

Answer 1

To access network devices for administrative purpose, we have only three methods available :
[1] Telnet : Which uses PAP authentication protocol between client and the NAS device. So the communication between Client and NAS is unencrypted,  and when this information flows from NAS to IAS server gets encrypted using the shared secret key configured on device/IAS server.
[2] SSH : Which uses  public-key cryptography for encrypting information between client and the NAS device, i.e, information sent between client 
and NAS is fully secure. And the communication between NAS and IAS is encrypted using shared secret same as above. Good point on SSH side is that commincation channel is secure all the time.Again the authentication type would remain same that is PAP.
[3] Console:Which is also the same it will not allow to use MSCHAP as there is no need to secure it as you laptop is connected directly to the NAS and then if you are using TACACS it will encrypt the payload .
Summarizing, we cannot use CHAP, MS-CHAP, MS-CHAP V2 for communication between client and NAS device or administrative access.
And the most secure way to administer a  device is to use SSH.
Rgds, Jatin
Do rate helpful post~