topic Re: EAP-MSCHAPv2 support with AD using LDAP broker in Network Access Control

EAP-MSCHAPv2 support with AD using LDAP broker

mulatif — Thu, 08 Feb 2018 16:44:15 GMT

Hi,

As per the below document (Page 12)

https://www.cisco.com/c/en/us/td/docs/security/ise/2-2/admin_guide/b_ise_admin_guide_22/b_ise_admin_guide_22_chapter_011…

EAP-MSCHAPv2 is supported with AD and not with LDAP.

However I have a customer, who are evaluating to do ISE and AD integration through a LDAP directory broker service (i.e. add AD as an LDAP Server) instead of the 'native join', which is the more common way to do it.

In the above case, does the supported authentication table is still applicable ? i.e. EAP-MSCHAPv2 is not going to be supported even though the back-end is still AD and only the join method has changed.

Thanks,

Naman

Re: EAP-MSCHAPv2 support with AD using LDAP broker

mulatif — Thu, 08 Feb 2018 16:47:06 GMT

This is the LDAP directory broker product https://www.radiantlogic.com/products/radiantone-vds-standard-edition/

Re: EAP-MSCHAPv2 support with AD using LDAP broker

hslai — Thu, 08 Feb 2018 16:53:11 GMT

Yes, the support table is applicable to any ID store configured as a LDAP ID source in ISE.