WPA Enterprise: PEAP - BookJMP

Overview

PEAP (Protected EAP) wraps the MSCHAPv2 exchange inside a TLS tunnel. The most common WPA Enterprise configuration in corporate environments, authenticates with a domain username and password.

Config File

wpa-enterprise-peap.conf:

network={
    ssid="NETWORK-NAME"
    scan_ssid=1
    key_mgmt=WPA-EAP
    eap=PEAP
    identity="DOMAIN\username"
    password="password"
    phase1="peaplabel=0"
    phase2="auth=MSCHAPV2"
}

Connect

sudo wpa_supplicant -Dnl80211 -i <INTERFACE> -c wpa-enterprise-peap.conf

Get an IP address:

sudo dhclient <INTERFACE> -v