PEAP Wpa_supplicant

[Manoj Verma, Noida]

Hi,

At the following site:

http://www.cisco.com/en/US/products/hw/wireless/ps430/products_qanda_item091
86a008010018c.shtml
 
There is a question:
"Q. What is the difference between the Microsoft PEAP supplicant and the
Cisco PEAP supplicant?"
Answer is: The Microsoft PEAP supplicant supports client authentication by
only MS-CHAP Version 2.....

This means that MS-PEAP only supports MSChapv2 and not the GTC.
This point is again emphasized in the page-2, 2nd paragraph last two lines
of the attached document.

This contradicts the statement below given by Jouni.

Kindly clarify on this.

Regds..



-----Original Message-----
From: hostap-bounces+manojv=noida.hcltech.com at shmoo.com
[mailto:hostap-bounces+manojv=noida.hcltech.com at shmoo.com] On Behalf Of
Jouni Malinen
Sent: Tuesday, August 24, 2004 7:42 AM
To: hostap at shmoo.com
Subject: Re: PEAP Wpa_supplicant

On Mon, Aug 23, 2004 at 09:04:20PM +0530, Manoj Verma, Noida wrote:

> The wpa_supplicant code implements the Microsoft PEAP (MSChapv2), but 
> I am not able to find if the wpa_supplicant also implements the CISCO
PEAP.
> 
> If it does, kindly provide pointer to that code.

Yes, it does. eap_peap.c includes both the PEAPv0 ("Microsoft") and
PEAPv1 ("Cisco") implementation and both can be used with MSCHAPv2 and
GTC as inner authentication methods.

Please note that PEAPv1 has some interoperability issues since various
RADIUS servers implement it differently. I fixed couple of problems with
PEAPv1 just couple of days ago, so you may have to use the development
CVS snapshot with some servers. In addition, you may have to tweak
couple of parameters in wpa_supplicant.conf based on which server you
are using (most likely, add phase1="peaplabel0" for Cisco mode); see
eap_testing.txt for more details.

-- 
Jouni Malinen                                            PGP id EFC895FA
_______________________________________________
HostAP mailing list
HostAP at shmoo.com
http://lists.shmoo.com/mailman/listinfo/hostap

-------------- next part --------------
A non-text attachment was scrubbed...
Name: ttls-peap.zip
Type: application/octet-stream
Size: 13396 bytes
Desc: not available
Url : http://lists.shmoo.com/pipermail/hostap/attachments/20040824/b8c94f0e/attachment.obj