Release Notes K.12.26

63
Enhancements
Release K.12.23 Enhancements
Release K.12.23 Enhancements
Release K.12.23 includes the following enhancement:
■ Enhancement (PR_1000449129) — This enhancement allows MAC or Web-based
authentication to use PEAP/MS-CHAPv2 protocols in addition to the default setting of CHAP.
Web Auth Secure Protocol
It is desirable to have an additional method for Web authentication that allows the storage of
passwords in a secure manner rather than as plain text. The MS-CHAPV2 authentication method
allows password verification without requiring access to a plain text password. This method also will
be provided for MAC authentication.
The aaa authentication command is modified to provide the web-based and mac-based options. After
selecting one of these options, you can choose the authentication method, either chapradius (the
default) or the more secure peap-mschapv2 authentication method.
Figure 15. Example Command with peap-mschapv2 Option Selected
The show authentication command will display which authentication method has been configured.
Syntax: aaa authentication <console | login | num-attempts | port-access | ssh | telnet | web | web-based |
mac-based>
web-based or mac-based<chapradius | peap-mschapv2>: After selecting either web-
based or mac-based options, you can choose the authentication method.
Default: chapradius
ProCurve(config)# aaa authentication web-based peap-mschapv2