https://community.cisco.com/t5/network-access-control/about-ise-wireless-authentication-issue/m-p/3919987#M457331 <P><a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/273653">@Stan Huang</a>&nbsp; -&nbsp; I suspect this is normal and it has to do with how passwords are stored.&nbsp; LDAP doesn't have the capabilities to perform the password challenge required during PEAP.&nbsp; PEAP password exchange is a tricky business and it requires a backend that supports that.</P> <P>&nbsp;</P> <P>From the <A href="https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01101.pdf" target="_self">ISE Install Guide</A></P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="ise-auth.PNG" style="width: 751px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/44440iBCE2D05D80CBD8FE/image-size/large?v=v2&amp;px=999" role="button" title="ise-auth.PNG" alt="ise-auth.PNG" /></span></P> Fri, 06 Sep 2019 04:50:13 GMT Arne Bier 2019-09-06T04:50:13Z https://community.cisco.com/t5/network-access-control/about-ise-wireless-authentication-issue/m-p/3918046#M457330 <P>We have an issue need to verified.</P> <P>We use&nbsp;<SPAN>Linux LDAP Server as a wireless authentication server. When we use web authenticate is fine. If we change to 802.1X with PEAP, endpoint(windows system) will failed to authenticate. Not sure if anyone meet the same issue?&nbsp; &nbsp;&nbsp;</SPAN></P> <P>&nbsp;</P> <P><SPAN>Stan</SPAN></P> Tue, 03 Sep 2019 09:47:16 GMT https://community.cisco.com/t5/network-access-control/about-ise-wireless-authentication-issue/m-p/3918046#M457330 Stan Huang 2019-09-03T09:47:16Z https://community.cisco.com/t5/network-access-control/about-ise-wireless-authentication-issue/m-p/3919987#M457331 <P><a href="https://community.cisco.com/t5/user/viewprofilepage/user-id/273653">@Stan Huang</a>&nbsp; -&nbsp; I suspect this is normal and it has to do with how passwords are stored.&nbsp; LDAP doesn't have the capabilities to perform the password challenge required during PEAP.&nbsp; PEAP password exchange is a tricky business and it requires a backend that supports that.</P> <P>&nbsp;</P> <P>From the <A href="https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_01101.pdf" target="_self">ISE Install Guide</A></P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="ise-auth.PNG" style="width: 751px;"><img src="https://community.cisco.com/t5/image/serverpage/image-id/44440iBCE2D05D80CBD8FE/image-size/large?v=v2&amp;px=999" role="button" title="ise-auth.PNG" alt="ise-auth.PNG" /></span></P> Fri, 06 Sep 2019 04:50:13 GMT https://community.cisco.com/t5/network-access-control/about-ise-wireless-authentication-issue/m-p/3919987#M457331 Arne Bier 2019-09-06T04:50:13Z