What is EAP/PEAP(v0) with MSCHAPV2?
EAP/PEAP(v0) with MSCHAPV2 is a username/password based method. MSCHAPV2 is originally a Microsoft authentication method and widely supported on Windows clients from Windows 2000 and Windows Me onwards. It supersedes the broken MSCHAP protocol, which should no longer be used. Normally, MSCHAPV2 is used on its own, without further protection. However, PEAP adds an extra security layer by performing the MSCHAPV2 inside a “Protected EAP” tunnel (hence the name: PEAP). Although username/password based, PEAP-MSCHAPV2 can also use certificates to authenticate the server. In other words, as with EAP/TLS, you want your user to be sure which accesspoint they are connecting to, and in order to this, the server will present a certificate, proving its identity. A client certificate, however, is not used in this method.
