topic Re: Hello! Does Ruckus ZoneDirector support MSCHAPV2 in 9.6 build 15 ? in ZoneDirector

Hello! Does Ruckus ZoneDirector support MSCHAPV2 in 9.6 build 15 ?

khaqan_faridi — Mon, 12 May 2014 12:23:48 GMT

Re: Hello! Does Ruckus ZoneDirector support MSCHAPV2 in 9.6 build 15 ?

sid_sok — Mon, 12 May 2014 15:25:42 GMT

It should work, for client authentication the ZD/AP is only a tunnel between the client and the radius server. The client and server will negotiate what to use, the AP and ZD should only forward traffic between the two.

The UG notice for PAP and now CHAP is only in reference to the ability to use the ZD to run a test against the radius server. The ZD's test of the radius server only uses PAP or CHAP.

Re: Hello! Does Ruckus ZoneDirector support MSCHAPV2 in 9.6 build 15 ?

rodrigus_feitos — Thu, 16 Oct 2014 14:35:58 GMT

But CHAP is not the same MSCHAP. How can that work?

Re: Hello! Does Ruckus ZoneDirector support MSCHAPV2 in 9.6 build 15 ?

sid_sok — Mon, 20 Oct 2014 22:51:04 GMT

Are you talking about Test the AAA server or are you talking about an actual client authenticating?

If you are talking about a real client, there is not much you need to set on the ZD, just the IP address of the Radius server, the Shared Secret and the Auth port.

The rest, negotiation for security protocol to use is done between the Client and the radius server.

The ZD will just tunnel the authentication traffic between the client and Radius. If the client and Radius server are configured to use MSCHAPv2 it will work.