topic Re: Authentication method is not supported in Network Access Control

Authentication method is not supported

gasliu — Tue, 23 Feb 2016 10:38:53 GMT

Hi Experts,

I have a customer is using 802.1x with AD on ISE 2.0. But the authentication is constantly failed. The Failure reason shows on log as “22064 Authentication method is not supported by any applicable identity store(s)” .

Do you have any experience on it? The customer is using PEAP (MSCHAPv2) as authentication protocol.

Thank you for your help.

Re: Authentication method is not supported

Jason Kunst — Tue, 23 Feb 2016 11:29:16 GMT

Sounds like they are not setup in there authentication policies with an identity store mapped to the protocol they are using

If using AD should connect domain and choose appropriate groups

https://www.google.com/search?site=&source=hp&ei=9EPMVuPFIIX0jgSd07GIAw&q=22064+authentication+method+is+not+supported+b…

Customer should be contacting TAC if this is production issue

Re: Authentication method is not supported

Timothy Abbott — Tue, 23 Feb 2016 16:04:28 GMT

There are a couple things you can check:

1. Make sure ISE is joined to AD and security groups are added

2. Ensure that PEAP (MSCHAPv2) is checked in Allowed Protocols

3. Verify that AD is referenced for Wired 802.1X in authentication policy

ISE has intelligent defaults for wired and wireless 802.1X so building authentication policy from scratch should not be needed.

Regards,

-Tim

Re: Authentication method is not supported

gasliu — Tue, 23 Feb 2016 22:22:43 GMT

Hi Timothy,

The things you mentioned I have already checked.

Best Regards,

Gaspard Liu (刘洪曦) .:|:.:|:.

CCIE Wireless

Travel Plan: