HP2920 - how to set peap-radius for auth?

[boospy]

Hello all, 

i would like to confiure the radiusauth like with this part of configline:

aaa authentication web login radius local peap-radius

But this would not work here. If i have a look in the handbook: https://techhub.hpe.com/eginfolib/networking/docs/switches/WB/15-18/5998-8152_wb_2920_asg/content/ch06s04.html i can see that the option should work. But maybe i missunderstand the syntax. Here a piece of the doc's: 

aaa authentication <console|telnet|ssh|web|<enable|login <local|radius>> web-based|mac-based <chap-radius|peap-radius>>

Here my systeminfo: Software revision  : WB.16.10.0005

thanks a lot

[Emil_G]

Hello

You are trying to configure authentication for webUI access for login or operator level. I assume that you need some more secure RADIUS option which protects the credentials when they are transported to the RADIUS server.

In this case why not use peap-mschapv2 istead of radius

HP-2920-24G-PoEP(config)# aaa authentication web login ?
local Use local switch user/password database.
radius Use RADIUS server.
peap-mschapv2 Use RADIUS server with PEAP-MSChapv2.
HP-2920-24G-PoEP(config)# aaa authentication web login peap-mschapv2 local

In this case the switch and the RADIUS server should use PEAP-MSCHAPv2 as a RADIUS protocol. The password will be protected by sending it within an encrypted TLS tunnel.  The RADIUS server needs to have a server certificate for EAP.

Did you test this option already? Toe option is not in the documentation but it appears in the CLI context help.

Just a short notice about what login here means. Login access is equal to operator access, this user can only view some information about the switch but cannot change the configuraiton. The enable priviledge provides full access.

HP-2920-24G-PoEP(config)# aaa authentication web ?
enable Configure access to the privileged mode commands.
login Configure login access to the switch.
HP-2920-24G-PoEP(config)# aaa authentication web

[boospy]

Thank you very much. I check this