Skip to main content

​
Overview

TTLS (Tunneled TLS) establishes a TLS tunnel first, then authenticates inside using a simpler inner method (PAP, CHAP, MSCHAPv2). Less common than PEAP but still present in some enterprise environments.

​
Config File: TTLS/MSCHAPv2

wpa-enterprise-ttls.conf: 
network={
    ssid="NETWORK-NAME"
    scan_ssid=1
    key_mgmt=WPA-EAP
    eap=TTLS
    identity="DOMAIN\username"
    anonymous_identity="anonymous"
    password="password"
    phase2="auth=MSCHAPV2"
}

​
Config File: TTLS/PAP

network={
    ssid="NETWORK-NAME"
    scan_ssid=1
    key_mgmt=WPA-EAP
    eap=TTLS
    identity="DOMAIN\username"
    anonymous_identity="anonymous"
    password="password"
    phase2="auth=PAP"
}

​
Connect

sudo wpa_supplicant -Dnl80211 -i <INTERFACE> -c wpa-enterprise-ttls.conf
Get an IP address: 
sudo dhclient <INTERFACE> -v