EAP-PEAP authentication

[romain.goldswain]

Hi 

I am trying to connect to a cisco network that authenticates users by eap-peap. I am using linux Ubuntu and have manually entered the settings that I could find on the internet.

network={
        ssid="Imperial-WPA"
        priority=1
        proto=RSN
        key_mgmt=WPA-EAP
        pairwise=CCMP
        auth_alg=OPEN
        eap=PEAP
        identity="my username "
        password="my password normally and in hex keys "
        phase1="peaplabel=0"
        phase2="auth=MSCHAPV2"

But it still doesnt allow me to connect. I believe the user certificate is missing does anyone have any idea how I can get it to connect

[Freerk Terpstra]

Because you use MSCHAPv2 for phase2, no client certificate is involved within the authentication. However, there is a server certificate involved on the RADIUS server side for setting up phase 1. It depends on the settings and the supplicant but it might be required to define the public cert of the RADIUS server so it can be validated by the client.

Before making any changes on the client side I would start troubleshooting on the RADIUS server. There should be some log(file) with more information regarding your session and what the end-result is. A decent RADIUS server (like Cisco ISE) will even tell you what might be going wrong (client refusing the server certificate for example). If you don't see any incoming session I would look for a log(file) on the client itself. Good luck!

Please rate useful posts... :-)