630 Configuring AAA for network users
NN47250-500 (Version 03.01)

Enabling PEAP-MS-CHAP-V2 offload

The following example illustrates how to enable PEAP-MS-CHAP-V2 offload. In this example, all EAP processing is
offloaded from the RADIUS server, but MS-CHAP-V2 authentication and authorization are done via a RADIUS server.
The MS-CHAP-V2 lookup matches users against the user list on a RADIUS server.
1Configure the RADIUS server r1 at IP address 10.1.1.1 with the string starry for the key. Type the
following command:
WSS# set radius server r1 address 10.1.1.1 key starry
2Configure the server group sg1 with member r1. Type the following command:
WSS# set server group sg1 members r1
3Enable all 802.1X users of SSID thiscorp using PEAP-MS-CHAP-V2 to authenticate MS-CHAP-V2 on
server group sg1. Type the following command:
WSS# set authentication dot1x ssid thiscorp * peap-mschapv2 sg1
4Save the configuration:
WSS save config
success: configuration saved.