Information Technology Reference
In-Depth Information
7.
Enable the authentication methods that you want to enable for your RRAS server, or
disable those that you do not want to use. The options are:
Extensible Authentication Protocol (EAP): enabled by default
Microsoft Encrypted Authentication v2 (MS-CHAP v2): enabled by default
Microsoft Encrypted Authentication (MS-CHAP): enabled by default
Encrypted Authentication (CHAP)
Shiva Password Authentication Protocol (SPAP)
Unencrypted Password (PAP)
8.
You may optionally configure your RRAS server to allow remote clients to connect
without any level of authentication.
9.
Click OK when complete.
Using a Command-Line Interface
You can configure your RRAS server's authentication parameters from the command line
using the
netsh ras
syntax.
To display the authentication protocols used by your RRAS server, run the following
command:
> netsh ras show authtype
The output will look like this:
>netsh ras show authtype
Enabled Authentication Types:
Code Meaning
MSCHAP Microsoft Challenge-Handshake Authentication Protocol.
MSCHAPv2 Microsoft Challenge-Handshake Authentication Protocol version 2.
EAP Extensible Authentication Protocol.
To configure the authentication protocol used by your RRAS server, run the
netsh ras add
authtype
command:
> netsh ras add authtype {pap|spap|md5chap|mschap|mschapv2|eap}
This command must be issued once for each authentication protocol that you want to
add. These are the options:
PAP
: Unencrypted password
SPAP
: Shiva Password Authentication Protocol
MD5CHAP
: Encrypted Authentication
MSCHAP
: Microsoft Encrypted Authentication
