ZyXEL G-1000 v2 User’s Guide

Figure 102 Sequences for EAP MD5–Challenge Authentication

Mutual Authentication with Internal RADIUS server.

Microsofts Challenge-Handshake Authentication Protocol (MS-CHAP V2) is used to periodically verify the identity of the peer (station or other AP) using a three-way handshake.

The following figure depicts a typical wireless network with a G-1000 v2 RADIUS server for user authentication using PEAP (Protected EAP) and MS-CHAP V2.

The G-1000 v2 authenticates in two phases when it is acting as a RADIUS server:

182