Skip to main content
Fix the citated text. It was wrong in a couple of places.
Source Link

From cisco wesite you can read (link):

PEAP is based on server side EAP-EAP-TLS authentication. With PEAP many organizations can avoid the issues associated with installing digital certificates on every client device as required by EAP-TLS; instead, they can select the methods of client authentication, such as logon passwords or OTPs that best suit their corporate needs. Also PEAP is an enhancement of EAP-TLS authentication, PEAP is an enhancement of EAP-TLS authentication, PEAP encapsulates a second-phase authentication transaction within the TLS framework

So it is possible, but note that not checking the server certificate on the client makes the system vulnerable MITM that can lead to eavesdropping.

From cisco wesite you can read (link):

PEAP is based on server side EAP-TLS authentication. With PEAP many organizations can avoid the issues associated with installing digital certificates on every client device as required by EAP-TLS; instead, they can select the methods of client authentication, such as logon passwords or OTPs that best suit their corporate needs. Also PEAP is an enhancement of EAP-TLS authentication, PEAP encapsulates a second-phase authentication transaction within the TLS framework

So it is possible, but note that not checking the server certificate on the client makes the system vulnerable to eavesdropping.

From cisco wesite you can read (link):

PEAP is based on server side EAP-TLS authentication. With PEAP many organizations can avoid the issues associated with installing digital certificates on every client device as required by EAP-TLS; instead, they can select the methods of client authentication, such as logon passwords or OTPs that best suit their corporate needs. Also PEAP is an enhancement of EAP-TLS authentication, PEAP encapsulates a second-phase authentication transaction within the TLS framework

So it is possible, but note that not checking the server certificate on the client makes the system vulnerable MITM that can lead to eavesdropping.

Source Link

From cisco wesite you can read (link):

PEAP is based on server side EAP-TLS authentication. With PEAP many organizations can avoid the issues associated with installing digital certificates on every client device as required by EAP-TLS; instead, they can select the methods of client authentication, such as logon passwords or OTPs that best suit their corporate needs. Also PEAP is an enhancement of EAP-TLS authentication, PEAP encapsulates a second-phase authentication transaction within the TLS framework

So it is possible, but note that not checking the server certificate on the client makes the system vulnerable to eavesdropping.