PEAPv1(EAP-GTC) config with Cisco ACS

Dan Williams dcbw at redhat.com
Mon Mar 16 15:16:36 EDT 2009


On Mon, 2009-03-16 at 20:55 +0200, Jouni Malinen wrote:
> On Mon, Mar 16, 2009 at 02:55:00PM +1100, Ben Carbery wrote:
> 
> > I am still getting failures after commenting the phase1 line. Can someone
> > please check these are the right settings for PEAPv1(EAP-GTC)? Note it
> > should using PAP, not MSCHAP.
> 
> >         eap=PEAP
> >         # phase1="peap_outer_success=0 peaplabel=1"
> >         phase2="auth=GTC"
> 
> Replace that phase2 line with:
> 
>         phase2="auth=PAP"
> 
> (and you can remove the commented out phase1 line; if peaplabel=1 is
> used there, it will break interoperability with ACS)

So his setup really isn't GTC, but PAP, right?  When *is* GTC usually
used with PEAP?

Dan



More information about the HostAP mailing list