Enabling Peap-Ms-Chap-V2 Offload - Nortel 2360 Configuration Manual

558 Configuring AAA for network users

Enabling PEAP-MS-CHAP-V2 offload

The following example illustrates how to enable PEAP-MS-CHAP-V2 offload. In this example, all EAP processing is
offloaded from the RADIUS server, but MS-CHAP-V2 authentication and authorization are done via a RADIUS server.
The MS-CHAP-V2 lookup matches users against the user list on a RADIUS server.
1
Configure the RADIUS server r1 at IP address 10.1.1.1 with the string starry for the key. Type the
following command:
WSS# set radius server r1 address 10.1.1.1 key starry
2
Configure the server group sg1 with member r1. Type the following command:
WSS# set server group sg1 members r1
3
Enable all 802.1X users of SSID thiscorp using PEAP-MS-CHAP-V2 to authenticate MS-CHAP-V2 on
server group sg1. Type the following command:
WSS# set authentication dot1x ssid thiscorp * peap-mschapv2 sg1
4
Save the configuration:
WSS save config
success: configuration saved.
NN47250-500 (320657-F Version 02.01)