Connecting an Android phone to an 802.1x Wifi SSID using RADIUS

Summary

Here we will show the settings for a WiFi profile connecting to a 802.1x SSID using an Android phone (Version 6 +). RADIUS enabled 802.1x WIFI SSID is the go to solution for user authentication on BYOD networks and will remove the need for the daily login on a portal page. 

Settings in the WiFi profile

Connect to the SSID and the following dialogue box opens. Fill in the appropriate values and select the shown options in the drop-down lists.

Wifi-802.1x-android.png

Drop-down options

EAP Method:
PEAP

Phase-2 Authentication:
MSCHAPV2

CA certificate:
Do not validate

Input fields

Identity:
Windows username

Anonymous identity:
Leave blank

Password:
Windows password

NOTE: Instead of using "Do not validate", it's possible to select a named Certificate Authority. The Certificate Authority used by the RADIUS service on Smoothwall can be downloaded from the "Services - Authentication - BYOD" page. This can be imported on both Android and iOS devices and be used to verify the certificates used by the SSID.