topic wlc + ise 2.0 + 802.1x. Problem: windows 7 can't login automaticly in Network Access Control

wlc + ise 2.0 + 802.1x. Problem: windows 7 can't login automaticly

Peter Handke — Mon, 11 Mar 2019 06:51:51 GMT

Hi,

I have wlc 2504 with authorization active directory via 802.1x with ise 2.0. It was some problem with tls 1.2 so i have applied patches number: 1,2,3. After that i can login from all android os versions, ios and linux but not from windows 7. I don't have W10 yet.

Windows 7 sees ssid but can't login. If i add ssid by hand, it works for me. There is some patch or bug in ise 2.0 or in Windows 7 to get full automatic mode ?

thanks for help

Peter

Hi Peter, I have a couple of

nspasov — Tue, 14 Jun 2016 15:34:53 GMT

Hi Peter, I have a couple of questions:

1. What type of authentication are you performing? (PEAP, EAP-TLS, etc)

2. What type of certificate are you using on ISE? (Self-signed or signed by a well known CA)

Thank you for rating helpful posts!

I have been able to use

Dustin Anderson — Tue, 14 Jun 2016 15:37:03 GMT

I have been able to use windows 7 and 10 on 2.0.1 and 2.1, One issue I ran into is do you use a valid cert, or self-signed?

For testing we used a self-signed and had to add to server as a trusted CA otherwise windows would not connect for us.

But for more info, how do you onboard windows devices? Do you use AnyConnect? etc.

Sounds like a cert issue.

michaellperrin — Wed, 15 Jun 2016 02:00:04 GMT

Sounds like a cert issue.

Windows supplicant will not trust any certs by default even ones in the trusted CA store.

You our need to manually create the wireless connection for it to work.