Questions tagged [peap]
The peap tag has no usage guidance.
25 questions
0
votes
1
answer
2k
views
NPS Radius Configuration EAP-Ms-Chapv2
I'm tryng to fix my Microsoft Server 2016 Network Policy Server configuration as radius server, with PEAP-MSChapv2.
As well known some modern devices are not able to "not validate" server ...
1
vote
1
answer
5k
views
How to enable 802.1x EAP-TTLS with PAP in Windows 7?
By default, Windows 7 doesn't support EAP-TTLS authentication method natively. If I enable IEEE 802.1X authentication in Windows 7, I can see only two authentication methods:
Microsoft smart cards or ...
0
votes
1
answer
3k
views
How to Add Wireless PEAP Profile Username and Password for during MDT Deployment
I have a windows 7 pro 64-bit reference image running in a Hyper-V client for MDT 2013 deployment on server 2012. The computers are standalone with no AD and I have no control over the network ...
1
vote
0
answers
767
views
802.1x Wifi with NPS Server, using EAP-PEAP and a certificate for Authentication
I don't know if what I am trying to do is possible but here we go.
I have a bunch of iPad's that I am going to supervise before they go on to my network. The iPad's will connect to the wifi via 802....
1
vote
0
answers
842
views
connecting Linux pppd to LDAP server to authenticate MSCHAPv2?
I need to provide a remote access VPN service. I'd like very much to use JumpCloud.com to do the user database management. I'm trying to achieve the following:
Provide l2tp+ipsec VPN service to users,...
1
vote
1
answer
2k
views
With freeradius and PEAP-MSCHAP, how does one limit connectivity to a single group?
I feel like jumping up and down after I got FreeRadius, samba winbind, XCA w/ ECDSA certs, Active Directory, and Ubiquiti Unifi all talking together.
Next problem, any valid account in ...
0
votes
1
answer
2k
views
For 802.1x PEAP RADIUS Authentication, do you use a different certificate per server?
Consider an environment that uses 802.1x PEAP authentication via RADIUS. Typically, this is to authenticate wireless clients.
In this environment there are multiple RADIUS servers and clients will be ...
3
votes
1
answer
4k
views
Windows machines cannot connect to Radius Wifi
Environment Background:
4 Domain Controllers, DC01 DC02 DC03 DC04
DC01 is my PDC
DC02 is my NPS Server
The other two are load balancing and site specific.
I'm using a Ruckus Zone Director with Ruckus ...
0
votes
1
answer
615
views
Certificate not found error trying to set up PEAP-MS-Chap v2 authentication
I am trying to set up PEAP-MS-Chap v2 authentication for my VPN on a Windows 2003 SP2 server using a self-signed certificate. I have meticulously followed the PEAP certificate requirements when ...
1
vote
0
answers
265
views
Windows 2008 NPS server unable to authenticate Ubuntu client on wireless
I have Windows clients able to authenticate (EAP-PEAP MSCHAPV2) configured to authenticate with Windows 2008 server with no issues, however i am not using any Server certificate for outer-EAP (Neither ...
0
votes
0
answers
125
views
Windows computers refusing to connect to WPA2 Enterprise Network
We have all our computers set up on a WPA2 Enterprise network authenticating with a PEAP Certificate. The certificate is valid until 2017, and the network is functioning correctly on all the Macs we ...
2
votes
1
answer
1k
views
Debian WPA2-Enterprise (Network-manager) 802.1X no prompt for certificate?
I set up an access point (AP) with PEAP (Freeradius) 802.1X authentication and trying to connect the following:
iOS: Automatically provides the certificate to the onscreen user.
Windows: ...
0
votes
1
answer
1k
views
Configuring C2950 with 802.1X/PEAP and RADIUS server
I am setting up 802.1X security on a LAN which has a C2950 switch that controls access from the WLAN to the Ethernet LAN. I plan to use PEAP. I read this the Cisco article on configuring 802.1X ...
0
votes
1
answer
930
views
Does Windows support PEAPv1/EAP-GTC?
We are running a wireless infrastructure using PEAPv1/EAP-GTC. Our Windows machines can't seem to connect to wireless access points, what is happening?
2
votes
1
answer
1k
views
PEAP validation against a different, secondary domain?
Probably a little bit confusing, so let me explain the situation.
Our company wants to implement a corporate wireless LAN with PEAP authentication. Unfortunately, someone made a big mistake in our ...
3
votes
1
answer
8k
views
L2TP with PEAP authentication from MacOS/iOS
Following the recent security advisory, I'm reconfiguring our VPN servers and having trouble.
We're using Windows 2008 R2 server for VPN services, running RRAS and NPS on the same server and ...
5
votes
2
answers
6k
views
What should I use instead of MS-CHAP v2?
There's a new tool and service that makes it very easy to break MS-CHAP v2, which is used to secure VPNs. A good summary of the attach against MS-CHAP can be found at Ars Technica. Here's the way I ...
0
votes
1
answer
5k
views
Radius Authorization against ActiveDirectory and the users file
I have a problem with my freeradius server configuration. I want to be able to authenticate users against Windows ActiveDirectory (2008 R2) and the users file, because some of my co-workers are not ...
4
votes
5
answers
13k
views
802.1x PEAP GPO that trusts self-signed CA certificate
I am working on a Freeradius backed 802.1.x authentication infrastructure for our wireless clients. I am using a rather generic Freeradius configuration with EAP-PEAP. Our clients are predominantly ...
13
votes
7
answers
41k
views
Why would you use EAP-TTLS instead of PEAP?
As I understood EAP-TTLS and PEAP share same level of security when implemented in wireless networks. Both only provide server side authentication via certificate.
The drawback of EAP-TTLS can be ...
1
vote
1
answer
618
views
Why do I get certificate error when connecting to "trusted PEAP server?"
I'm trying to connect Windows 7 machine to my wireless network secured with WPA2-Enterprise PEAP.
PEAP uses server authentication so I have created root CA named FesbCA on my Windows server 2008 R2 ...
7
votes
1
answer
17k
views
Third Party Wildcard Certificates for use with Microsoft NPS / RADIUS / PEAP
I want to replace the SSL certificate that is used for PEAP on our NPS server that is doing RADIUS authentication for our Cisco WLCs. The current certificate is a SSL certificate that does Client ...
3
votes
1
answer
4k
views
Radius Certificate Based (eap) Authentication
We are currently putting in place a freeradius server that uses certificates to authenticate via a wireless connection. We have this working for 802.1x but Novell's client for Windows 7 breaks the 802....
1
vote
2
answers
2k
views
wireless ethernet adapter with EAP-PEAP? [closed]
We have a wireless network set up to support WPA or WPA2 with AES or TKIP encryption and EAP-PEAP authentication. Users are wanting to connect devices that don't have the ability to do EAP-PEAP but ...
0
votes
1
answer
681
views
How do you connect a Nokia n810 Internet Tablet to WPA with PEAP and MSCHAPv2?
We have a wireless network that's using PEAP and MSCHAPv2 for authentication.
Linux connects fine, but on a Nokia n810 Internet Tablet I get this error:
No CA certificates available to validate ...