The experience of building a RADIUS server under Windows

1. EAP type: EAP-PEAP, EAP-TLS, EAP-TTLS, EAP-MD5

TLS requires a certificate on the client server side; PEAP and TTLS only require server-side certificates.

2. Authentication protocol: PAP, Ms-chapv1 (aka MD4), Ms-chapv2, GTC. That's all that's common.

3. Through the RADIUS server 6272, 6278 success log and 6273 failure log, you will find:

EAP types are: Microsoft Security password (EAP-MSCHAP v2)

Authentication types are: Ms-chapv1, Md5-chap, PAP, EAP

4. Two-stage certification: I've only seen this on my phone, and I guess that means authentication protocol.

5. For users, you need to tick "store password with reversible encryption" in their account options

6. The company uses the Huawei AC6005 Wireless controller, which at first cannot be used in conjunction with RADIUS is related to the "Load balancing" setting.

Windows 2012R2-based AD radius wireless authentication: http://hubuxcg.blog.51cto.com/2559426/1636719

How to differentiate eap-md5,eap-tls,peap:http://zhidao.baidu.com/question/456137803087898365.html

Http://s3b-support.us.dell.com/support/edocs/network/P72721/sc/security.htm#ttls

The difference between MSCHAPV1 and V2: https://technet.microsoft.com/zh-cn/library/cc732393 (v=ws.10). aspx

FREERADIUS-EAP Configuration and testing: http://mark-shih.blogspot.com/2011/08/freeradius-eap.html

Freeradius + PPTP System Erection Guide: http://cifer.me/2014/12/20/freeradius-setup-tutorial/

The experience of building a RADIUS server under Windows