I'm trying to setup RADIUS authentication for our devices at work but have had to put that project on hold because one of the guys here doesn't like that it uses PAP authentication with the policies on my Network Policy Server. I'm trying to figure a way to work around this but haven't been able to make it work without PAP and use something like CHAP or MS-CHAP instead.

Is it possible to configure RADIUS authentication with Cisco devices to use CHAP or MS-CHAP instead of PAP authentication and if so how?