Proxy RADIUS from MSCHAPv1 to MSCHAPv2

Franco Pieressa fpieressa at
Sat Feb 23 14:54:03 CET 2008

I can't upgrade the NAS nor the RADIUS server :-(
What I need to know, is if it's theorically possible to translate the MSCHAPv1 authentication to a MSCHAPv2 authentication?  Can the keys and the challenge be converted? 
Regards> Date: Sat, 23 Feb 2008 14:40:02 +0100> From: aland at> To: freeradius-users at> Subject: Re: Proxy RADIUS from MSCHAPv1 to MSCHAPv2> > Franco Pieressa wrote:> > Hi! I have a NAS that ONLY support MSCHAPv1 (requiring the Microsoft> > RADIUS extended attribute MS-CHAP-MPPE-Keys), that need to authenticate> > with a RADIUS server that ONLY support MSCHAPv2.> > This doesn't appear to have anything to do with FreeRADIUS.> > > Can I proxy RADIUS packets through FreeRADIUS and convert MSCHAPv1 <-->> > MSCHAPv2? To be more specific, is it possible to make the> > MS-CHAP-MPPE-Keys (v1) from then MS-MPPE-Send-Key (v2)?> > Why not just upgrade your NAS and RADIUS server? They both appear to> be substantially broken.> > And no, I don't think FreeRADIUS supports this. Maybe it's possible,> but as this is the first time I've seen anyone ask for it, it's not a> high priority.> > Alan DeKok.> -> List info/subscribe/unsubscribe? See
Express yourself instantly with MSN Messenger! Download today it's FREE!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <>

More information about the Freeradius-Users mailing list