Questions tagged [peap]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0 votes
0 answers
107 views

Windows Server 2016 - Error EapHost when connecting to NPS from Cisco Access Point

I have a simple setup: Cisco Access Point (old one AIR-CAP3502I-E-K9), and it is connected to an older Cisco Switch, and to the switch, the same VLAN, I have a Windows 2016 server. The server has ...
  • 1
0 votes
1 answer
675 views

NPS Radius Configuration EAP-Ms-Chapv2

I'm tryng to fix my Microsoft Server 2016 Network Policy Server configuration as radius server, with PEAP-MSChapv2. As well known some modern devices are not able to "not validate" server ...
  • 11
1 vote
1 answer
4k views

How to enable 802.1x EAP-TTLS with PAP in Windows 7?

By default, Windows 7 doesn't support EAP-TTLS authentication method natively. If I enable IEEE 802.1X authentication in Windows 7, I can see only two authentication methods: Microsoft smart cards or ...
0 votes
1 answer
2k views

How to Add Wireless PEAP Profile Username and Password for during MDT Deployment

I have a windows 7 pro 64-bit reference image running in a Hyper-V client for MDT 2013 deployment on server 2012. The computers are standalone with no AD and I have no control over the network ...
1 vote
0 answers
558 views

802.1x Wifi with NPS Server, using EAP-PEAP and a certificate for Authentication

I don't know if what I am trying to do is possible but here we go. I have a bunch of iPad's that I am going to supervise before they go on to my network. The iPad's will connect to the wifi via 802....
  • 255
1 vote
0 answers
745 views

connecting Linux pppd to LDAP server to authenticate MSCHAPv2?

I need to provide a remote access VPN service. I'd like very much to use JumpCloud.com to do the user database management. I'm trying to achieve the following: Provide l2tp+ipsec VPN service to users,...
1 vote
1 answer
2k views

With freeradius and PEAP-MSCHAP, how does one limit connectivity to a single group?

I feel like jumping up and down after I got FreeRadius, samba winbind, XCA w/ ECDSA certs, Active Directory, and Ubiquiti Unifi all talking together. Next problem, any valid account in ...
0 votes
1 answer
1k views

For 802.1x PEAP RADIUS Authentication, do you use a different certificate per server?

Consider an environment that uses 802.1x PEAP authentication via RADIUS. Typically, this is to authenticate wireless clients. In this environment there are multiple RADIUS servers and clients will be ...
  • 165
3 votes
1 answer
3k views

Windows machines cannot connect to Radius Wifi

Environment Background: 4 Domain Controllers, DC01 DC02 DC03 DC04 DC01 is my PDC DC02 is my NPS Server The other two are load balancing and site specific. I'm using a Ruckus Zone Director with Ruckus ...
0 votes
1 answer
394 views

Certificate not found error trying to set up PEAP-MS-Chap v2 authentication

I am trying to set up PEAP-MS-Chap v2 authentication for my VPN on a Windows 2003 SP2 server using a self-signed certificate. I have meticulously followed the PEAP certificate requirements when ...
  • 111
1 vote
0 answers
205 views

Windows 2008 NPS server unable to authenticate Ubuntu client on wireless

I have Windows clients able to authenticate (EAP-PEAP MSCHAPV2) configured to authenticate with Windows 2008 server with no issues, however i am not using any Server certificate for outer-EAP (Neither ...
0 votes
0 answers
95 views

Windows computers refusing to connect to WPA2 Enterprise Network

We have all our computers set up on a WPA2 Enterprise network authenticating with a PEAP Certificate. The certificate is valid until 2017, and the network is functioning correctly on all the Macs we ...
  • 11
2 votes
1 answer
970 views

Debian WPA2-Enterprise (Network-manager) 802.1X no prompt for certificate?

I set up an access point (AP) with PEAP (Freeradius) 802.1X authentication and trying to connect the following: iOS: Automatically provides the certificate to the onscreen user. Windows: ...
  • 244
0 votes
1 answer
979 views

Configuring C2950 with 802.1X/PEAP and RADIUS server

I am setting up 802.1X security on a LAN which has a C2950 switch that controls access from the WLAN to the Ethernet LAN. I plan to use PEAP. I read this the Cisco article on configuring 802.1X ...
0 votes
1 answer
864 views

Does Windows support PEAPv1/EAP-GTC?

We are running a wireless infrastructure using PEAPv1/EAP-GTC. Our Windows machines can't seem to connect to wireless access points, what is happening?
2 votes
1 answer
1k views

PEAP validation against a different, secondary domain?

Probably a little bit confusing, so let me explain the situation. Our company wants to implement a corporate wireless LAN with PEAP authentication. Unfortunately, someone made a big mistake in our ...
  • 155
3 votes
1 answer
8k views

L2TP with PEAP authentication from MacOS/iOS

Following the recent security advisory, I'm reconfiguring our VPN servers and having trouble. We're using Windows 2008 R2 server for VPN services, running RRAS and NPS on the same server and ...
  • 145
5 votes
2 answers
5k views

What should I use instead of MS-CHAP v2?

There's a new tool and service that makes it very easy to break MS-CHAP v2, which is used to secure VPNs. A good summary of the attach against MS-CHAP can be found at Ars Technica. Here's the way I ...
  • 2,463
0 votes
1 answer
5k views

Radius Authorization against ActiveDirectory and the users file

I have a problem with my freeradius server configuration. I want to be able to authenticate users against Windows ActiveDirectory (2008 R2) and the users file, because some of my co-workers are not ...
  • 645
4 votes
5 answers
12k views

802.1x PEAP GPO that trusts self-signed CA certificate

I am working on a Freeradius backed 802.1.x authentication infrastructure for our wireless clients. I am using a rather generic Freeradius configuration with EAP-PEAP. Our clients are predominantly ...
user avatar
13 votes
7 answers
37k views

Why would you use EAP-TTLS instead of PEAP?

As I understood EAP-TTLS and PEAP share same level of security when implemented in wireless networks. Both only provide server side authentication via certificate. The drawback of EAP-TTLS can be ...
1 vote
1 answer
565 views

Why do I get certificate error when connecting to "trusted PEAP server?"

I'm trying to connect Windows 7 machine to my wireless network secured with WPA2-Enterprise PEAP. PEAP uses server authentication so I have created root CA named FesbCA on my Windows server 2008 R2 ...
7 votes
1 answer
16k views

Third Party Wildcard Certificates for use with Microsoft NPS / RADIUS / PEAP

I want to replace the SSL certificate that is used for PEAP on our NPS server that is doing RADIUS authentication for our Cisco WLCs. The current certificate is a SSL certificate that does Client ...
  • 101k
3 votes
1 answer
4k views

Radius Certificate Based (eap) Authentication

We are currently putting in place a freeradius server that uses certificates to authenticate via a wireless connection. We have this working for 802.1x but Novell's client for Windows 7 breaks the 802....
  • 496
1 vote
2 answers
2k views

wireless ethernet adapter with EAP-PEAP? [closed]

We have a wireless network set up to support WPA or WPA2 with AES or TKIP encryption and EAP-PEAP authentication. Users are wanting to connect devices that don't have the ability to do EAP-PEAP but ...
  • 3,787
0 votes
1 answer
642 views

How do you connect a Nokia n810 Internet Tablet to WPA with PEAP and MSCHAPv2?

We have a wireless network that's using PEAP and MSCHAPv2 for authentication. Linux connects fine, but on a Nokia n810 Internet Tablet I get this error: No CA certificates available to validate ...
  • 2,405