SUMMARY STEPS
1.
configure terminal
2.
no aaa authentication login ascii-authentication
3.
aaa authentication login chap enable
4.
(Optional)
exit
5.
(Optional)
show aaa authentication login chap
6.
(Optional)
copy running-config startup-config
DETAILED STEPS
Purpose
Command or Action
Enters configuration mode.
configure terminal
Example:
Step 1
switch#
configure terminal
switch(config)#
Disables ASCII authentication.
no aaa authentication login ascii-authentication
Example:
Step 2
switch(config)#
no aaa authentication login
ascii-authentication
Enables CHAP authentication. The default is disabled.
aaa authentication login chap enable
Step 3
Example:
You cannot enable both CHAP and MSCHAP
or MSCHAP V2 on your Cisco NX-OS device.
Note
switch(config)#
aaa authentication login chap
enable
Exits configuration mode.
(Optional)
exit
Example:
Step 4
switch(config)#
exit
switch#
Displays the CHAP configuration.
(Optional)
show aaa authentication login chap
Example:
Step 5
switch#
show aaa authentication login chap
Copies the running configuration to the startup
configuration.
(Optional)
copy running-config startup-config
Example:
Step 6
switch#
copy running-config startup-config
Enabling MSCHAP or MSCHAP V2 Authentication
Microsoft Challenge Handshake Authentication Protocol (MSCHAP) is the Microsoft version of CHAP. The
Cisco NX-OS software also supports MSCHAP Version 2 (MSCHAP V2). You can use MSCHAP for user
logins to a Cisco NX-OS device through a remote authentication server (RADIUS or ). MSCHAP
V2 only supports user logins to a Cisco NX-OS device through remote authentication RADIUS servers. If
Cisco Nexus 9000 Series NX-OS Security Configuration Guide, Release 9.x
24
Configuring AAA
Enabling MSCHAP or MSCHAP V2 Authentication
