The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
0answers
12 views

PEAPv0 Used in Windows Server 2012?

I've read the Wikipedia article on PEAP and have searched Microsoft.com. By all indications, Windows (in my case, Server 2012), uses PEAPv0 (as opposed to PEAPv1 or PEAPv2) to wrap MSCHAPv2. Is ...
0
votes
0answers
237 views

Freeradius/Openldap/802.1X: PEAP-MSCHAPv2 XOR certificates

For WPA2 Enterprise I would like to have user authentication which is supported out-of-the-box by as many clients as possible (i.e., PEAP-MSCHAPv2). Furthermore, for laptops, workstations etc. I ...
0
votes
1answer
90 views

With freeradius and PEAP-MSCHAP, how does one limit connectivity to a single group?

I feel like jumping up and down after I got FreeRadius, samba winbind, XCA w/ ECDSA certs, Active Directory, and Ubiquiti Unifi all talking together. Next problem, any valid account in ...
1
vote
0answers
22 views

Guide on how to create certificates and setup an EAP-TLS on debian [closed]

I need to create an EAP-TLS authentication using a freeradius. Currently I am a working EAp-PEAP setup, it is working fine. However, I now needs to move to an EAP-TLS. For this I need to create some ...
0
votes
1answer
166 views

For 802.1x PEAP RADIUS Authentication, do you use a different certificate per server?

Consider an environment that uses 802.1x PEAP authentication via RADIUS. Typically, this is to authenticate wireless clients. In this environment there are multiple RADIUS servers and clients will be ...
3
votes
0answers
510 views

Windows machines cannot connect to Radius Wifi

Environment Background: 4 Domain Controllers, DC01 DC02 DC03 DC04 DC01 is my PDC DC02 is my NPS Server The other two are load balancing and site specific. I'm using a Ruckus Zone Director with Ruckus ...
0
votes
1answer
120 views

Certificate not found error trying to set up PEAP-MS-Chap v2 authentication

I am trying to set up PEAP-MS-Chap v2 authentication for my VPN on a Windows 2003 SP2 server using a self-signed certificate. I have meticulously followed the PEAP certificate requirements when ...
1
vote
0answers
73 views

Windows 2008 NPS server unable to authenticate Ubuntu client on wireless

I have Windows clients able to authenticate (EAP-PEAP MSCHAPV2) configured to authenticate with Windows 2008 server with no issues, however i am not using any Server certificate for outer-EAP (Neither ...
0
votes
0answers
80 views

Windows computers refusing to connect to WPA2 Enterprise Network

We have all our computers set up on a WPA2 Enterprise network authenticating with a PEAP Certificate. The certificate is valid until 2017, and the network is functioning correctly on all the Macs we ...
1
vote
1answer
312 views

Debian WPA2-Enterprise (Network-manager) 802.1X no prompt for certificate?

I set up an access point (AP) with PEAP (Freeradius) 802.1X authentication and trying to connect the following: iOS: Automatically provides the certificate to the onscreen user. Windows: ...
0
votes
1answer
565 views

Configuring C2950 with 802.1X/PEAP and RADIUS server

I am setting up 802.1X security on a LAN which has a C2950 switch that controls access from the WLAN to the Ethernet LAN. I plan to use PEAP. I read this the Cisco article on configuring 802.1X ...
0
votes
1answer
444 views

Does Windows support PEAPv1/EAP-GTC?

We are running a wireless infrastructure using PEAPv1/EAP-GTC. Our Windows machines can't seem to connect to wireless access points, what is happening?
2
votes
1answer
563 views

PEAP validation against a different, secondary domain?

Probably a little bit confusing, so let me explain the situation. Our company wants to implement a corporate wireless LAN with PEAP authentication. Unfortunately, someone made a big mistake in our ...
2
votes
1answer
4k views

L2TP with PEAP authentication from MacOS/iOS

Following the recent security advisory, I'm reconfiguring our VPN servers and having trouble. We're using Windows 2008 R2 server for VPN services, running RRAS and NPS on the same server and ...
4
votes
2answers
1k views

What should I use instead of MS-CHAP v2?

There's a new tool and service that makes it very easy to break MS-CHAP v2, which is used to secure VPNs. A good summary of the attach against MS-CHAP can be found at Ars Technica. Here's the way I ...
0
votes
1answer
3k views

Radius Authorization against ActiveDirectory and the users file

I have a problem with my freeradius server configuration. I want to be able to authenticate users against Windows ActiveDirectory (2008 R2) and the users file, because some of my co-workers are not ...
3
votes
4answers
3k views

802.1x PEAP GPO that trusts self-signed CA certificate

I am working on a Freeradius backed 802.1.x authentication infrastructure for our wireless clients. I am using a rather generic Freeradius configuration with EAP-PEAP. Our clients are predominantly ...
7
votes
7answers
12k views

Why would you use EAP-TTLS instead of PEAP?

As I understood EAP-TTLS and PEAP share same level of security when implemented in wireless networks. Both only provide server side authentication via certificate. The drawback of EAP-TTLS can be ...
1
vote
1answer
461 views

Why do I get certificate error when connecting to “trusted PEAP server?”

I'm trying to connect Windows 7 machine to my wireless network secured with WPA2-Enterprise PEAP. PEAP uses server authentication so I have created root CA named FesbCA on my Windows server 2008 R2 ...
7
votes
1answer
6k views

Third Party Wildcard Certificates for use with Microsoft NPS / RADIUS / PEAP

I want to replace the SSL certificate that is used for PEAP on our NPS server that is doing RADIUS authentication for our Cisco WLCs. The current certificate is a SSL certificate that does Client ...
3
votes
1answer
3k views

Radius Certificate Based (eap) Authentication

We are currently putting in place a freeradius server that uses certificates to authenticate via a wireless connection. We have this working for 802.1x but Novell's client for Windows 7 breaks the 802....
1
vote
2answers
895 views

wireless ethernet adapter with EAP-PEAP? [closed]

We have a wireless network set up to support WPA or WPA2 with AES or TKIP encryption and EAP-PEAP authentication. Users are wanting to connect devices that don't have the ability to do EAP-PEAP but ...
0
votes
1answer
580 views

How do you connect a Nokia n810 Internet Tablet to WPA with PEAP and MSCHAPv2?

We have a wireless network that's using PEAP and MSCHAPv2 for authentication. Linux connects fine, but on a Nokia n810 Internet Tablet I get this error: No CA certificates available to validate ...