Monitoring, Management & Location Tracking

Q:

Is PEAP-MSCHAPv2 is support in AMP for radius authentication ?

From AMP version 8.2.3 we have the option to configure the PEAP-MSCHAPv2 RADIUS authentication method. From AMP setup -> Authentication -> radius authentication we can choose the authentication method as shown below.

Once the authentication is successful we can the response from the Radius server with the expected role as shown below:

In Airwave we can see the role in information in the qlog for auth handler as shown below:

      name => "Read-Only Monitoring and Auditing",

      rapids => 0,

      sponsor_allow_no_expiration => 1,

      sponsor_allow_sponsor_name_change => 1,

      sponsor_custom_message => undef,

      sponsor_guest_lifetime_duration => undef,

      sponsor_guest_lifetime_duration_text => undef,

      ucc => 1,

      visualrf => 0

    }, 'Mercury::DB::Role' ),

    sync_token => "/7T8rU2UUnre8mqZn+eJ+xw",

    type => "RADIUS",

    username => "test\@a.com"

  }