PEAPv1(EAP-GTC) config with Cisco ACS

Jouni Malinen j at w1.fi
Mon Mar 16 14:55:29 EDT 2009


On Mon, Mar 16, 2009 at 02:55:00PM +1100, Ben Carbery wrote:

> I am still getting failures after commenting the phase1 line. Can someone
> please check these are the right settings for PEAPv1(EAP-GTC)? Note it
> should using PAP, not MSCHAP.

>         eap=PEAP
>         # phase1="peap_outer_success=0 peaplabel=1"
>         phase2="auth=GTC"

Replace that phase2 line with:

        phase2="auth=PAP"

(and you can remove the commented out phase1 line; if peaplabel=1 is
used there, it will break interoperability with ACS)

-- 
Jouni Malinen                                            PGP id EFC895FA


More information about the HostAP mailing list