EAP-PEAP/EAP-MSCHAPv2 authentication with extra frames

[Nickolay Belchugov]

Hi all,

I am comparing several EAP authentication protocols and I found out when
authenticating with EAP-PEAP/EAP-MSCHAPv2 some extra frames were
transmitted during the second phase of authentication(When supplicant is
authenticated). In fact extra 4 frames were transmitted which is equivalent
to an EAP-MSCHAPv2 process. Thus, I suppose the second phase is repeated.
But, in the end, there is successful authentication, of course.

Here's my network configuration:

Supplicant[wpa_supplicant 1.0/2.0]<---emulated 802.11a
network-->Authenticator[hostapd]<---linux bridge-->Authentication
Server[freeradius 2.1.12]

So have you ever noticed this issue?

Cheers,
Nicko
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.shmoo.com/pipermail/hostap/attachments/20130903/85c46707/attachment.htm>