AAA on a Cisco Switch Using EAP MSCHAPv2

To configure a Cisco switch to use AAA and 802.1X for port based authentication, you can use a variety of authentication protocols. Extensible Authentication Protocol (EAP) can be used in combination with Microsoft Challenge Handshake Authentication Protocol version 2 (MSCHAPv2) for a more secure arrangement.

To do so, you must create an EAP Profile, assign method MSCHAPV2 then apply the command to the switch port interface as dot1x authenticator eap profile PROFILE_NAME.

https://networklessons.com/cisco/ccie-routing-switching/aaa-configuration-cisco-switch