Cisco 9800-40:Change GUI radius authentication method from PAP to PEAP

[rajitoor55]

We got new 9800s and I am trying to configure radius for GUI. I followed this link to set it up but the authentication method in ISE shows as PAP. What steps or guide should I follow to change it to PEAP.

https://www.cisco.com/c/en/us/support/docs/wireless/catalyst-9800-series-wireless-controllers/214490-configure-radius-and-tacacs-for-gui-and.html 

Thanks

[Gaurav Kansal]

Hi

You can define PEAP protocol in ISE under

Policy>>Policy Elements>>Results>>Authentication>>Allowed Protocol

Go through the below link also, may it will help you.

https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/213543-configure-eap-tls-flow-with-ise.html

Good Luck

[rajitoor55]

@Gaurav Kansal  I can allow PAP on ISE but I don't want to use PAP as its not secure. I know my radius secret is still requiered for getting password out of it but I want to go secure from the start. I want to use PEAP and want requests that are coming from WLC for GUI login to be PEAP-MSCHAPV2.