On Wed, Feb 3, 2010 at 4:07 PM, Godfrey Peart <grpeart@googlemail.com> wrote:

Thank you,  so is there a method to grant access if a user fails the access-challenge request when using mschap + peap

I overlooked the "mschap" part, sorry :P It might be possible to do so if you use other EAP methods (like PEAPv1/EAP-GTC, where you can get user's plaintext password), but it'd require installing additional supplicant software for clients as Windows does not support PEAP-GTC by default. What do you intend to use it for? Perhaps it's easier to simply create a second SSID with no wireless security. -- Fajar