topic Virtual Smart Zone Radius Protocol cann't by PAP in SmartZone and Virtual SmartZone

Virtual Smart Zone Radius Protocol cann't by PAP

avatarcyt — Thu, 28 Apr 2022 09:31:09 GMT

My Virtual Smart Zone is 6.0.0.0.1331 ，then I use Proxy(SZ Authenticator)，Create Radius ，
Test AAA by PAP is Good。
But when I actually connect back to Radius through the AP, it fails
Error log display "chap: ERROR: &control:Cleartext-Password is required for authentication"

I want use Protocol PAP , where can i do it set ?

Re: Virtual Smart Zone Radius Protocol cann't by PAP

Vineet_nejwala — Fri, 13 May 2022 10:11:43 GMT

@avatarcyt

PAP and CHAP protocol are used only for controller testing , this is done for user/roles validation and connectivity check, whereas actual client uses EAP/radius protocol to authenticate when using 802.1X WLAN. If the AAA test is success from controller but client fails to connect you need to check your Connection request policy and NPS policy on the server. Although if you are using Web auth WLAN then by default it uses CHAP and can be changed to PAP using below AP CLI command :

set aaa auth-method pap

Best Regards

Vineet

Re: Virtual Smart Zone Radius Protocol cann't by PAP

kedo — Mon, 14 Oct 2024 10:07:58 GMT

Hey sir,

if i want to enter "set aaa auth-method pap " this command on cli .

In what mode should this command be executed on vsz?

Re: Virtual Smart Zone Radius Protocol cann't by PAP

Vineet_nejwala — Wed, 04 Dec 2024 16:42:09 GMT

Hi Kedo,

So you want to change the aaa auth method to pap from default chap and I assume you want this for your web auth WLAN. This command needs to be executed on AP CLI and if there are bulk APs you can create an AP CLI script and push command via SZ.

https://support.ruckuswireless.com/articles/000004057

Best Regards

Vineet