Change radius Protocol from PAP to MS-CHAPv2
-
Hello guys,
I followed this guide to enable pfSense 2FA at login.
https://www.comparitech.com/blog/vpn-privacy/pfsense-two-factor-authentication/
But there is something I don't like. As you can see PAP is used as Radius Protocol and not MS-CHAPv2
I tried changing it to MS-CHAPv2, but as soon as I change the protocol and go to the diagnostics -> authentication section to check if everything is ok, the authentication no longer works. If I change it back to PAP then authentication succeeds and if I change it back to CHAPv2 then authentication fails.
What needs to be changed throughout the configuration so that once the Radius Protocol MS-CHAPv2 is selected, it will authenticate successfully.
I would be very grateful if someone could look at the configuration from the link at the beginning and tell me what the problem might be and how I could solve it.
Thanks for your time. I appreciate it!
-
Why are you trying to change it? That traffic is only between internal services on localhos,t it never leaves the firewall.
-
@markdudov I dont think freeradius on pfSense supports Chapv2 unless its EAP encapsulated.
