Administrator Guide

196 | 802.1X EAP-PEAP Reference Dell Networking W-ClearPass Deployment Guide
Inner EAP MSCHAPv2
25 The authentication server sends an EAP request to the supplicant containing an MS-CHAPv2 challenge.
26 The authenticator forwards the EAP request to the supplicant.
27 The supplicant responds with an EAP Identity Response containing its identity to the authenticator.
28 The authenticator forwards this EAP Identity Response to the authentication server.
Active Directory
29
The authentication server takes the username and the MSCHAPv2 response from the supplicant and
combines it with the MSCHAPv2 challenge and the NetBIOS name of the Active Directory domain and
submits this set of information to the Active Directory domain controller for authentication. This is done
via NT LAN Manager (NTLM).
30
The Active Directory domain controller lets the authentication server know that the authentication was
successful.