4.2.1 Successful PEAP Phase 1 and 2 Negotiation

This is similar to the example in section 4.1.1, except that, after phase 1, a Capabilities request and a SoH request are sent by the PEAP server and the peer responds with a NAK for both the requests. The peer also ignores the cryptobinding TLV from the PEAP server.

The following figure shows the PEAP server implementation not enforcing cryptobinding; if it did, the last message would be an EAP-Failure instead of EAP-Success.

Successful PEAP phase 1 and 2 negotiation

Figure 9: Successful PEAP phase 1 and 2 negotiation