01-16-2012 03:10 PM - edited 01-16-2012 03:14 PM
Can PEAP/MSCHAPv2 work with the internal database?
In other words does ArubaOS itself include this EAP type?
If so, does the controller have a certificate which I can accept at the station?
Solved! Go to Solution.
01-16-2012 03:48 PM
The controller does have a built-in certificate (securelogin.arubanetworks.com) but you should NOT use this for 802.1X for security reasons. You should install your own certificate on the controller through Configuration->Certificate Manager.
If you use the controller's certificate, then anyone else who has an Aruba controller can impersonate your network. All Aruba controllers use the same factory-default certificate.
Jon Green, ACMX, CISSP