PEAPv1(EAP-GTC) config with Cisco ACS

[Jouni Malinen]

On Mon, Mar 16, 2009 at 02:55:00PM +1100, Ben Carbery wrote:

> I am still getting failures after commenting the phase1 line. Can someone
> please check these are the right settings for PEAPv1(EAP-GTC)? Note it
> should using PAP, not MSCHAP.

>         eap=PEAP
>         # phase1="peap_outer_success=0 peaplabel=1"
>         phase2="auth=GTC"

Replace that phase2 line with:

        phase2="auth=PAP"

(and you can remove the commented out phase1 line; if peaplabel=1 is
used there, it will break interoperability with ACS)

-- 
Jouni Malinen                                            PGP id EFC895FA