1.4.3.2 EAP-PEAP MSCHAPv2

The phase 1 authentication is the same as EAP-PEAP. In phase 2 another EAP conversation occurs along with exchange of username and password as shown in Figure 1-6. All the packets in phase two are encrypted with secured TLS tunnel.