20 likes | 150 Vues
EAP-MSCHAP-V2 is an authentication method that offers secure password change services for both server and client-initiated sessions, making it an affordable solution for network security. It supports mutual authentication, which enhances safety during access. This protocol is commonly used for authenticating secure LAN switches and wireless networks, although it is vulnerable to dictionary attacks. With key derivation supporting MPPE up to 128 bits, it employs MSCHAP.v2 and MPPE algorithms, ensuring reliable data protection.
E N D
Name: EAP-MSCHAP-V2 • Justification: Provides authentication and password change services (server and client initiated) with low deployment costs and widespread back end server support. • Scenario: Authentication for secure LAN switches and wireless networks • EAP Type: 29 • Mutual Authentication: Supported • Fast Reconnect: Not supported • Dictionary Attack: Vulnerable • Key Derivation: 40, 56 and 128 bit MPPE (RFC 3078) • Algorithms: MSCHAP v2 (RFC 2759) and MPPE • Standards Group Dependencies: None IETF 53, EAP BOF Session, March 2002 dpotter@cisco.com