TABLE 1: Authentication and Encryption Settings Under RRAS
Desired condition Clients Non-Microsoft Clients Server
Allow any authentication including clear text Can use PAP, SPAP, CHAP, MD5-CHAP, or MS-CHAP Can use PAP or CHAP Can use PAP, SPAP, CHAP, MS-CHAP; cannot use MD5-CHAP
Require encrypted authentication Can use SPAP, CHAP, MD5-CHAP, or MS-CHAP; cannot use PAP Can use CHAP or SPAP; cannot use PAP Can use SPAP, CHAP, or MS-CHAP; cannot use PAP or MD5-CHAP
Require Microsoft encrypted authentication Can use only MS-CHAP Can use MS-CHAP only if client supports it Can use only MS-CHAP