https://community.cisco.com/t5/network-access-control/ise-wirless/m-p/3011692#M24170 <P>Hi there, the easiest way to do this is to utilize EAP-PEAP with machine authentication. Check out this video from Lab Minutes. It is for an older version of ISE but it should give you the general idea around what needs to be configured:</P> <P><A href="http://www.labminutes.com/sec0186_ise_13_wireless_dot1x_eap-tls_peap_1">http://www.labminutes.com/sec0186_ise_13_wireless_dot1x_eap-tls_peap_1</A></P> <P>There is part-1 and part-2 and they cover both EAP-PEAP and EAP-TLS.</P> <P>I hope this helps!</P> <P><EM>Thank you for rating helpful posts!</EM></P> Thu, 02 Feb 2017 18:50:03 GMT nspasov 2017-02-02T18:50:03Z https://community.cisco.com/t5/network-access-control/ise-wirless/m-p/3011691#M24169 <P></P> <P>Hi,</P> <P>I have a requirement like only domain joined computers should connect to only a particular ssid (eap based ) ,if not they should connect guest vlan</P> <P>How can i do that</P> <P>Thanks</P> Mon, 11 Mar 2019 07:25:39 GMT https://community.cisco.com/t5/network-access-control/ise-wirless/m-p/3011691#M24169 muhsi_2015 2019-03-11T07:25:39Z https://community.cisco.com/t5/network-access-control/ise-wirless/m-p/3011692#M24170 <P>Hi there, the easiest way to do this is to utilize EAP-PEAP with machine authentication. Check out this video from Lab Minutes. It is for an older version of ISE but it should give you the general idea around what needs to be configured:</P> <P><A href="http://www.labminutes.com/sec0186_ise_13_wireless_dot1x_eap-tls_peap_1">http://www.labminutes.com/sec0186_ise_13_wireless_dot1x_eap-tls_peap_1</A></P> <P>There is part-1 and part-2 and they cover both EAP-PEAP and EAP-TLS.</P> <P>I hope this helps!</P> <P><EM>Thank you for rating helpful posts!</EM></P> Thu, 02 Feb 2017 18:50:03 GMT https://community.cisco.com/t5/network-access-control/ise-wirless/m-p/3011692#M24170 nspasov 2017-02-02T18:50:03Z