AAA authentication type?

[cchipman]

I was trying to enable the pix to autheniticate users from our IAS (Radius Server) and it wasn't working. I was confused, as I had it already working for VPN authentication. Then I noticed in the IAS logs that it was stating that it was getting an INVALID authentication type, and that type was PAP. So I enabled PAP authentication on the server, and I was able to make it work.

However, I don't really want unencrypted passwords flying around the net, so is there any way to change the way that the PIX box tries to authenticate against a AAA server?

TIA,

 

[wfbtr]

i'm not an expert (yet!) but i think the vpn is ipsec, then the authentication between the PIX and the IAS server is pap/spap.