PEAP with Machine auth

Phil Mayers p.mayers at
Wed Oct 26 18:10:36 CEST 2011

On 26/10/11 16:54, Bonald wrote:
> If you are using the default config then your eap.conf must have
>   default_eap_type = md5

Yes. The client NAKs the EAP-MD5 and asks for PEAP.

> Try with peap.

Just to placate you, I have done so. It made no difference, except save 
one round-trip. User- and machine-based auth as well as single signon 
still both work.

The default EAP type is just that - the default. If you have the client 
set up to use PEAP, it will NAK the MD5 and ask for EAP, and the server 
will honour it.

Again: It is important that you understand authentication is driven by 

More information about the Freeradius-Users mailing list