I struggle to understand what relation RADIUS has with PAP and CHAP. Individually, I understand how CHAP and PAP work but I need clarification
Based on the image above, imagine I set up the switch using the Radius Server to authenticate users. Everything is working. I can SSH to the switch from my PC and use some credentials from Radius Server. Here is how I see the connection:
The user SSH to the switch, only SSH is used (neither chap nor PAP )
The switch contacts the Radius server using Radius messages (Access-Request) and PAP or CHAP. Am I right? And even if I use PAP, the password won't be in clear text but MD5-hashed with the shared secret between the switch and the radius server
The server responds to the switch with a message (Access-Accept).
The switch responds to the PC and accepts the connection (only using SSH)
Is my understanding correct?