For RADIUS-Based Authentication where EAP MS-CHAPv2 is configured on a client device, the outer method protocol that must be configured on the ISE to support this authentication type is PEAP (B). PEAP encapsulates the EAP MS-CHAPv2 within a secure TLS tunnel, providing an additional layer of protection for the authentication process. References: The use of PEAP with EAP MS-CHAPv2 is part of the RADIUS authentication mechanisms taught in the SPCOR training1.