PEAP MSCHAP V2 - Machine authentication not working

colmgrier · ‎07-22-2008

I have successfully got users to connect to the WLAN using PEAP-mschapv2 (no CA certificate on laptop) but I cannot get machine authentication to work.

At the moment I can get all users with diallin tab ticked to connect to the WLAN from a domain member laptop and a non member laptop. I would like to implement machine authentication so that only domain laptops will allow users to connect to the WLAN using PEAP-mschapv2.

Objective:

Allow domain user (dialin tab ticked) connected to the Wlan using a domain laptop or pc.

Please advise.

amritpatek · ‎07-28-2008

For the configuration setting for for PEAP (EAP-MSCHAP v2) Authentication follow the configuration guide http://www.cisco.com/en/US/docs/wireless/technology/peap/technical/reference/PEAP_D.html#wp1008130

krishanmistry · ‎08-05-2008

For all laptop and tablet clients to authenticate using the machine credential, you need to input the below registration keys on Client/Supplicant,

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EAPOL\Parameters\General\Global]

â€¢ SupplicantMode =dword:00000003

â€¢ AuthMode =dword:00000002

Krishan

Convergis