Re: EAP-TLV

________________________________ From: Stefan Winter <stefan.winter@restena.lu>

But there is of course the possibility that the NAS terminates EAP and then re-encapsulates it in a whole new PEAP session. Or a proxy doing the same.

You would be able to verify this by inspecting the server certificate you get on the client: is this the exact same certificate, issued by the same CA, that your FreeRADIUS server serves?

I don't know yet if my switch could be the issue. There is no proxy on this network. I'll have to find out how to inspect the server certificate I get on the Windows client. Thanks, Vieri