Partager via


2.2.3.1.2 PEAP_CONN_PROP

This data structure specifies the configuration for Microsoft implementation of Protected Extensible Authentication Protocol (PEAP) Specification [MS-PEAP] on the client. The fields are as follows.


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

Version

Size

NumberOfEAPTypes

Flags

PeapTlsProperties (variable)

...

InnerMethodProperties (variable)

...

IdentityPrivacyString (variable)

...

Padding (variable)

...

Version (4 bytes): A 4-byte unsigned integer that indicates the version of the PEAP_CONN_PROP. It is set to 1.

Size (4 bytes): A 4-byte unsigned integer that is set to the total size of the PEAP_CONN_PROP data structure in bytes plus (NumberOfEAPTypes + 1)* 4 plus the size of IdentityPrivacyString, including NULL character in bytes.

NumberOfEAPTypes (4 bytes): A 4-byte unsigned integer that indicates the number of EAP methods configured as the inner EAP method for PEAP. It is set to either 0 or 1.<18>

0x00000000

0x00000001

Flags (4 bytes): A 4-byte unsigned integer that indicates the properties for PEAP configuration by setting the following bit values.


0


1


2


3


4


5


6


7


8


9

1
0


1


2


3


4


5


6


7


8


9

2
0


1


2


3


4


5


6


7


8


9

3
0


1

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

0

E

D

C

B

A

Where the bits are defined as:

Value

Description

A

PeapFastRoaming: If set to 1, the clients participate in fast-roaming.

B

PeapInnerEAPOptional: If set to 1, the client allows the absence of any inner EAP method for successful authentication.<19>

C

PeapEnforceCryptoBinding: If set to 1, the client disconnects and fail PEAP authentication if the authenticating server does not provide a cryptobinding TLV.<20>

D

PeapEnableQuarantine: If set to 1, the client enables Network Access Protection feature in the PEAP protocol.<21>

E

PeapEnableIdentityPrivacy: If set to 1, the client enables the identity privacy feature in the PEAP protocol.<22>

PeapTlsProperties (variable): A variable size data that follows the format defined by PEAP_TLS_PHASE1_CONN_PROPERTIES (section 2.2.3.1.2.1). This field indicates the parameters that the clients use to establish the TLS tunnel in Phase 1 of PEAP as specified in [MS-PEAP] section 3.3.5.2.

InnerMethodProperties (variable): Optional variable size data that follows the format defined by PEAP_INNER_METHOD_PROPERTY (section 2.2.3.1.2.2) indicating the parameters the client uses for Inner EAP method inside PEAP. This field is present if NumberOfEAPTypes field is set to 1.

IdentityPrivacyString (variable): Optional variable size null-terminated Unicode string that MAY<23>be used to indicate the identity to be used in EAP-Identity response packet.

Padding (variable): Optional variable size field. Extends PEAP_CONN_PROP to the length specified in the Size field.