Security

Hi,

What service i need to configure in CPPM for AAA test from controller.

Thanks...

Nik..

You will need to configure a service that can handle PAP or MSCHAPv2 requests. If you configure a NAS-Identifier on the RADIUS server profile on the controller you can use that RADIUS attribute for the service classifcation. 

If you're trying MSCHAPv2 authentications against AD make sure your CPPM is joined to the domain. This is not required for PAP.

Keep in mind that the test is designed as a connectivity check, not a credential check.

You can use it without creating a service.

Timeout = connectivity issues

Reject = connectivity with RADIUS server is good

And for future refrence if someone else is looking at this post. You can do a CPPM AAA test to the AD with a user account in the policy simulation.