An engineer is configuring RADIUS-Based Authentication with EAP MS-CHAPv2 is configured on a client device.
Which outer method protocol must be configured on the ISE to support this authentication type?
Correct Answer: B
The correct answer is B. PEAP (Protected Extensible Authentication Protocol).
PEAP is an authentication protocol that provides a secure, encrypted method for transporting authentication data. It is commonly used with RADIUS-based authentication systems, such as Cisco ISE. PEAP encapsulates the inner authentication method within an encrypted TLS tunnel, providing privacy for the authentication process.
In this scenario, the client device is configured with EAP MS-CHAPv2 as the inner authentication method. EAP MS-CHAPv2 is a commonly used authentication method that provides mutual authentication between the client and the authentication server. However, it is not secure on its own, as it does not provide encryption for the authentication exchange.
By configuring PEAP as the outer method protocol on the ISE, the authentication process is secured through the use of TLS encryption. The client device initiates the authentication process by establishing a secure TLS tunnel with the ISE, and then the actual authentication exchange using MS-CHAPv2 is encapsulated within this secure tunnel. This ensures the confidentiality and integrity of the authentication process.