Why do I need PAP enabled on Windows for an ASA5510 to use Radius?

We have an ASA that allows remote VPN users. It connects to a Windows 2008 server. That server connects to a radius server, also Windows 2008. Things work fine if we enable PAP on the radius server, and the remote site server. If we disable PAP on either one, we lose the ability to authenticate.
I would prefer to not use PAP.
thanks.

Hello,
The ASA supports the following authentication methods with RADIUS:
•PAP—For all connection types.
•CHAP and MS-CHAPv1—For L2TP-over-IPsec connections.
•MS-CHAPv2—For  L2TP-over-IPsec connections, and for regular IPsec remote access  connections when the password management feature is enabled. You can  also use MS-CHAPv2 with clientless connections.
•Authentication  Proxy modes—Including RADIUS to Active Directory, RADIUS to RSA/SDI,  RADIUS to Token-server, and RSA/SDI to RADIUS connections,
so the  default is PAP, but you can enable MS-CHAPv2 by configuring "password management" under tunnel-group.
Hope this helps
Mashal Shboul

Similar Messages

  • Why cant i download itunes on my windows 7 pc? i used to have it once but it was not updated for a while and got deleted...i have tried to download it on other web browser but all i got was "thanks for downloaing itunes" and nothing happened

    why cant i download itunes on my windows 7 pc? i used to have itunes on my pc once but it was not uploded for a while and got deleted...and now i have tried to download it and all i got was "thanks for download itunes"...after that i have tired to dwnload it from another web browser and ive got the same thing.....!!

    Perhaps try downloading and saving a copy of the installer to a different PC. (If you're on a 32-bit Windows system, try to download on a different 32-bit Windows system.) Copy the iTunesSetup.exe installer to an external hard-drive, or a large-enough thumb drive or burn it to a CD-R. Carry the installer back to your PC, copy the installer to your hard drive. (Don't run the install from the ExHD, thumb or CD-R.) Start the install by doubleclicking the iTunesSetup.exe file.

  • Why do I need to convert QT movies for my ipad2?

    Why do I need to convert QT movies for my ipad2?

    Becuase the iPad only reads certain video formats you will need to convert them.
    But luckily you can drag your video files into iTunes and select the iTunes menu command (from the Advanced menu) to convert the file into a iPad/AppleTV comatible format. Easy.

  • Enable Secure communication for RFC destinations by using sm59 transaction

    Dear friends,
    We would like to enable secure communications for RFC destinations by using the sm59 transaction in our systems.
    We need to do this manually, by changing  the internal communication settings in a way they can communicate securely.
    Any idea or advice on the way it can be done ?
    We need to take each RFC, manually check it and secure it.
    Thanks in advance,
    Jordan

    In SM59 open up a RFC destination and go to Logon & Security. There you can enable Trusted relashionship and activate status of secure protocol.
    And yes you have to do it manually for the desired RFC's

  • Why my software needs Local Admin? Windows 7 App Compatibility

    Hi
    I have a software that works great on Windows 7
    My problem is that I can run it only with local admin. if I'm logged in with a standard user - I get errors and the software doesn't open. no errors in the event viewer
    Usually what I do in those cases is searching the registry or the folder that the user needs a modify permission and add it
    Sometimes I use procmon if I can't find it manually.
    in this case - procmon didn't help me :/. no "Access Denied" rows at all...
    I tried to add the user to the "Power Users"\"Distributed COM Users" group and I still get the same error.
    I tried to use the compatibility tab though the software works perfect on windows 7, my only problem is the prerequisite of local admin I'm trying to remove.
    Is there any tool I can use to find out what the software does that requires local admin rights?
    Tamir Levy

    Hi,
    Firstly please refer to this article to troubleshoot an application that cannot run as a standard user:
    An Application Cannot Run as a Standard User
    http://technet.microsoft.com/en-us/library/dd919180(v=ws.10).aspx
    Some programs are designed to perform legitimate administrative actions and therefore require administrative permissions. There is no idea to run it without administrator.
    Karen Hu
    TechNet Community Support

  • Hi  can any body please tell me how to open the .exe files in mac and why it is not supported with unarchiever app , also i am not able to run and dvd's in my mac its not accepting any cd's or dvd'd why do i need to do some settings for it ?

    Hi  can any body please tell me how to open the .exe files in mac and why it is not supported with unarchiever app , also i am not able to run and dvd's in my mac its not accepting any cd's or dvd'd why? do i need to do some pre defined  settings to run the cd's and dvd's ?

    A .exe file is a Windows executable. OS X does not run Windows programs. If you need to use .exe files then you will need to install Windows on your Mac:
    Windows on Intel Macs
    There are presently several alternatives for running Windows on Intel Macs.
    Install the Apple Boot Camp software.  Purchase Windows XP w/Service Pak2, Vista, or Windows 7.  Follow instructions in the Boot Camp documentation on installation of Boot Camp, creating Driver CD, and installing Windows.  Boot Camp enables you to boot the computer into OS X or Windows.
    Parallels Desktop for Mac and Windows XP, Vista Business, Vista Ultimate, or Windows 7.  Parallels is software virtualization that enables running Windows concurrently with OS X.
    VM Fusionand Windows XP, Vista Business, Vista Ultimate, or Windows 7.  VM Fusion is software virtualization that enables running Windows concurrently with OS X.
    CrossOver which enables running many Windows applications without having to install Windows.  The Windows applications can run concurrently with OS X.
    VirtualBox is a new Open Source freeware virtual machine such as VM Fusion and Parallels that was developed by Solaris.  It is not as fully developed for the Mac as Parallels and VM Fusion.
    Note that Parallels and VM Fusion can also run other operating systems such as Linux, Unix, OS/2, Solaris, etc.  There are performance differences between dual-boot systems and virtualization.  The latter tend to be a little slower (not much) and do not provide the video performance of the dual-boot system. See MacTech.com's Virtualization Benchmarking for comparisons of Boot Camp, Parallels, and VM Fusion. Boot Camp is only available with Leopard or Snow Leopard. Except for Crossover and a couple of similar alternatives like DarWine you must have a valid installer disc for Windows.
    You must also have an internal optical drive for installing Windows. Windows cannot be installed from an external optical drive.

  • Why do i need outlook 2007 or 2010 for i cloud

    why do i need outlook 2007 for i cloud i dont understand.

    iCloud will still work for free, i.e sync your contacts between ios devices and the cloud (icloud.com) but for the calendar and addresses to sync with a windows PC you will need outlook 2007+.
    However as you dont use that part at the moment i'm sesning no great loss - icloud bookmarks and photo stream will sync with a windows pc without outlook so the rest of icloud will still work for you for free

  • Why is Firefox opening a separate browser window for each link instead of a new tab in the current browser window?

    Suddenly firefox has started opening a new, separate browser window for every link and thing I open. It used to just open a new tab in the current browser. I must have closed down 15 browsers when trying to get back to a previous web page - the back button doesn't work when each click leads to a new window opening! I went into options and my settings have not changed, they still say "open new tab" for links. This just started happening out of the blue today. What's up?

    Start Firefox in [[Safe Mode]] to check if one of your add-ons is causing your problem (switch to the DEFAULT theme: Tools > Add-ons > Themes).
    * Don't make any changes on the Safe mode start window.
    See [[Troubleshooting extensions and themes]] and [[Troubleshooting plugins]]
    If it does work in Safe-mode then disable all your extensions and then try to find which is causing it by enabling one at a time until the problem reappears.
    * Use "Disable all add-ons" on the [[Safe mode]] start window to disable all extensions.
    * Close and restart Firefox after each change via "File > Exit" (Mac: "Firefox > Quit"; Linux: "File > Quit")

  • Need to enable autoreload feature for servlet in Tomcat

    Hello
    I wants to enable autoreload feature for servlet in tomcat so that i need not to stop tomcat 4.0 web server again and again
    Thanks

    http://jakarta.apache.org/tomcat/tomcat-4.1-doc/config/context.html
    It is amazing what reading the manual might do for ya.

  • Need help with installing Windows for the bar exam

    I need to retake the bar exam in Feb 2011 and I've decided to switch to typing. I am trying to figure out what Windows I need (the software says XP is fine but is that even available anymore)- so can someone walk me through this process? I've partioned my hard drive with the default 5GB but should it be more?
    I'm looking at buying Windows- is XP okay or should I shell out for 7-i.e. is one more compatible with Macs?
    And then finally, in the installation instructions they mention that I need my Mac OS disc for the process- is that the snow leopard disc or something else? My discs are in storage right now so should I wait until I get them before starting this process or can I get replacements if I accidentally threw them out in moving?
    Sorry for all the questions, but well, I'm racing to get everything done and I want to make sure I don't crash my system halfway through the exam!

    You don't need Boot Camp, but even XP will have a lot of stuff to update from after the install, and that takes temp space. Just as your Mac shows 5-10GB there is add'l hidden space used.
    Apple's 'requirements' has gotten others in trouble and I was pretty sure it was more like 10GB. Plus a lot of XP discs are now SP3.
    XP out of the box but connected to the net is just waiting for malware, average is 15 minutes to be infected. 7 is better and just in case you need it again.
    System Builder can come in 32 or 64-bit but XP is 32-bit only.
    VirtualBox by Oracle is a free VM.
    1GB for one program actually seems like a lot, or is that RAM requirement?

  • Why do you need to enable http communication with Basic authentication with Exchange Admin IP?

    The pre-reqs for the Exchange Admin IP say you have to make a few changes on your Exchange server (2010 on prem in my case). I have a few questions about those pre-reqs and I'm not able to find documentation online to help:
    Why does http communication with basic authentication for the powershell virtual directory in IIS need to be enabled? In the IP you still specify to connect over an SSL connection. The concern is what is being sent over unencrypted and what impacts are
    there to the security of the Exchange server.
    What role does the IP connect to (MBX/CAS/HT)? I'm not an Exchange guy so I don't know which roles install the PowerShell virtual directory.
    Are there any technet pages or white papers that talk about the MS developed IPs in any more detail than basic config?
    I appreciate any help anyone can offer. Thanks!
    -Raj

    Yeah I find this perplexing as well. I'm guessing it has something to do with Opalis origins perhaps.
    Would be good to understand why.

  • Why do I need to jiggle the window to get firefox to work?

    When I try to click on something inside a window I get that small gray circle that spins. I have to move the entire window a little to get the small green circle to start spinning, then the thing I clicked on comes up. Sometimes it can just hang there and time out.

    Check your network connection on run in start menu write "ping then one space then your DNS address then space then -t" and click on ok after some process on your command prompt window press ctrl+C then see wheather your receiving is equal or less the sending. If it is less then your network connection is running very slow if equal or more then network is good. You can also do this in command prompt window by writing the same ping statement.

  • Why do we need to enable force logging our primary database ?

    hi ,
    thanks in advance

    Hello;
    You need this to ensure the Standby database contains everything that occurs in the Primary database.
    If it helps, think of Data Guard as 1 database with two pieces in different modes. One side is always in Primary mode. Therefore the Standby needs to be an exact copy of whichever side is Primary.
    Best Regards
    mseberg

  • My 4s is disabled due to wrong passcode (I don't know why). I need to enable w/o itunes.

    My passcode stopped working today and now my phone is disabled. Can I reset it w/o itunes?

    Use the information in this support document http://support.apple.com/kb/ht1212

  • Why does data need to be turned on for group texting?

    Why does single person text msg only need cell service, but group texting requires data turned on?

    Start Firefox in <u>[[Safe Mode|Safe Mode]]</u> to check if one of the extensions or if hardware acceleration is causing the problem (switch to the DEFAULT theme: Firefox/Tools > Add-ons > Appearance/Themes).
    *Don't make any changes on the Safe mode start window.
    *https://support.mozilla.org/kb/Safe+Mode
    *https://support.mozilla.org/kb/Troubleshooting+extensions+and+themes

Maybe you are looking for