---
title: RADIUS 802.1x Configuration
slug: end-user-guide-3-5-0-legacy-ui/radius-8021x-configuration
description: Learn how to configure network settings for 802.1x RADIUS Authentication Services using Kron PAM with this comprehensive document. Obtain the authentication server CA certificate, create a network profile with specific security measures, encryption method
docTags: 
createdAt: 2022-08-11T08:48:32.000Z
---

If you use Kron PAM for 802.1x RADIUS Authentication Services, configure the settings below:

1. Obtain the authentication server CA certificate.
2. Create a network profile via the manual connection wizard:
   - Select the **Security Type** as **WPA2 Enterprise**.
   - Select the **Encryption** as **AES**.
   - Select the **Authentication Method** as **PEAP**.
3. To adjust the PEAP Properties:
   - Check the **Verify the server’s identity by validating the certificate** box.
   - Select CA certificate of the authentication.
   - Select the **Authentication Method** as **MSCHAPv2**


# Sample Configuration for Windows

1. Add the authentication server CA certificate to the Trusted Root Certification Authority using the MMC (MS Management Console) certificate plug-in.
2. Create a network profile via the manual connection wizard:
   - Select the **Security Type** as **WPA2 Enterprise**.
   - Select the** Encryption Type** as **AES**.
   - Select the** Authentication Method** as **MS Protected EAP** (PEAP).
3. To adjust the PEAP Properties:
   - Check the **Verify the server’s identity by validating the certificate** box.
   - Select the authentication server CA certificate from the Trusted Root Certification Authority list.
   - Select the **Authentication Method** as **EAP-MSCHAP v2**.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/cOK1dYRFMxuafLxNC1Ibd_image.png" size="42" width="468" height="354" position="center" showCaption="false"}

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/x9WOjcUMf3wnDP8MHZ7zB_image.png" size="48" width="621" height="462" caption="Manual Network Settings for Windows" position="center" showCaption="true"}

## Sample Configuration for Linux

1. Obtain the CA certificate of the authentication server.
2. Create a network profile via the manual connection wizard:
   - Select the **Wi-Fi Security** as **WPA2 Enterprise**.
   - Select the **Authentication** as **PEAP**.
3. To adjust the PEAP Properties:
   - Select CA certificate of the authentication server.
   - Select the **InnerAuthentication** as **EAP-MSCHAPv2**

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/fD9xDhJEBRmGpAAYjkVmw_image.png" size="50" width="380" height="405" caption="Manual Network Settings for Linux" position="center" showCaption="true"}