Wireless Access

Reply
Contributor I
Posts: 60
Registered: ‎12-15-2011

PEAP/MSCHAPv2 with Internal Database

[ Edited ]

Can  PEAP/MSCHAPv2 work with the internal database?

In other words does ArubaOS itself include this EAP type?

If so, does the controller have a certificate which I can accept at the station?

 

Thanks. 

Aruba Employee
Posts: 455
Registered: ‎04-02-2007

Re: PEAP/MSCHAPv2 with Internal Database

Yes, that's the basic setup you'll use when configuring your device.

 

-awl

Andy Logan, ACDX
Director, Strategic Account Solutions
Aruba Networks
Moderator
Posts: 245
Registered: ‎09-12-2007

Re: PEAP/MSCHAPv2 with Internal Database

The controller does have a built-in certificate (securelogin.arubanetworks.com) but you should NOT use this for 802.1X for security reasons.  You should install your own certificate on the controller through Configuration->Certificate Manager.

 

If you use the controller's certificate, then anyone else who has an Aruba controller can impersonate your network.  All Aruba controllers use the same factory-default certificate.

---
Jon Green, ACMX, CISSP
Security Guy
Search Airheads
Showing results for 
Search instead for 
Did you mean: