Skip to main content

​
Overview

PEAP (Protected EAP) wraps the MSCHAPv2 exchange inside a TLS tunnel. The most common WPA Enterprise configuration in corporate environments, authenticates with a domain username and password.

​
Config File

wpa-enterprise-peap.conf: 
network={
    ssid="NETWORK-NAME"
    scan_ssid=1
    key_mgmt=WPA-EAP
    eap=PEAP
    identity="DOMAIN\username"
    password="password"
    phase1="peaplabel=0"
    phase2="auth=MSCHAPV2"
}

​
Connect

sudo wpa_supplicant -Dnl80211 -i <INTERFACE> -c wpa-enterprise-peap.conf
Get an IP address: 
sudo dhclient <INTERFACE> -v