Page 1 of 1

Using PAP with RADIUS

Posted: Sun Apr 18, 2021 8:56 am
by nmvpm001
I am trying to use SE with RADIUS authentication through NPS/RADIUS on Windows Server 2019.

It seems that the only way I can get it to successfully authenticate an AD user through RADIUS is to have PAP enabled in the network policy on NPS.

With PAP sending password in plain text how can this be the only way to make this work. Seems very insure way or am i overlooking something with the configuration.

User account created: *
Auth Method: RADIUS
username entered as: username or domain\username

Any help to understand why PAP has to be used is appreciated.

thanks

Re: Using PAP with RADIUS

Posted: Sun Apr 18, 2021 1:09 pm
by eddiewu
PAP is used between VPN server and RADIUS server, which is on the server-side internal network. Why do you care about that? Remember, VPN traffic is also decrypted and forwarded on that network.
If the server has joined the AD, you can also use AD authentication without the need for RADIUS.