Re: Dynamic WEP support.

[Jouni Malinen <jkmaline cc hut fi>]

On Wed, Mar 22, 2006 at 03:34:07PM -0500, Robert Love wrote:

> So I have two questions: what are the EAP versions of the 2nd
> authentications?  E.g., what is "EAP-TTLS/EAP-MSCHAPv2" and how does it
> differ from "EAP-TTLS/MSCHAPv2" ?

EAP-TTLS allows phase 2 (tunneled) authentication to use both EAP
methods and non-EAP methods. EAP-MSCHAPv2 in this case is just the
normal EAP-MSCHAPv2 inside the tunnel. MSCHAPv2 is doing pretty much the
same thing, but with RADIUS/DIAMETER attributes and not EAP headers.

> And my second question is, for each of the above, I need a human
> readable name (pretty easy to figure out) and the string that
> wpa_supplicant expects.

I've been working with more documentation for wpa_supplicant
configuration and one part of this is a "configuration wizard" that can
be used to generate example configurations. It is not yet complete and
is likely to miss something. Anyway, the list of EAP types and their
options should include most of the commonly used options. The test
version is available at
http://hostap.epitest.fi/wpa_supplicant/conf/configure.html and it may
help in figuring out some of the configuration strings needed for
wpa_supplicant.

-- 
Jouni Malinen                                            PGP id EFC895FA