EAP Chaining with EAP-TLS

Daryl Clark — Fri, 21 Feb 2020 18:40:53 GMT

Hello...re-deploying 802.1x within a network with high security requirements. Fully functional PKI deployment is already out that issues both user and machine certificates. Also using Cisco NAM 4.5 as supplicant and ISE 2.2 as RADIUS server.

Setting up EAP-TLS for machine authentication is very easy to do. User authentication not so much. When setting up the new profile in Network Access Manager and I get to the "Credentials" tab of the network setup, I am prompted to "Use Single Sign On Credentials" or "Prompt for Credentials". We do not use Smart Cards so I cannot use the SSO Creds but I want to provide my end uses with the SSO experience and not have them have to select a certificate to use for authentication.

Any help would be appreciated.

Re: EAP Chaining with EAP-TLS

Rob Ingram — Tue, 05 Dec 2017 19:13:46 GMT

Hi Daryl,

Under User Credentials select - Prompt for Credentials > Remember while user is logged on. Then under Certificate sources ensure "Smart card or OS certificates" is selected. I've used this configuration and machine/user authentication is transparent to the user.

HTH

topic EAP Chaining with EAP-TLS in Network Access Control

EAP Chaining with EAP-TLS

Re: EAP Chaining with EAP-TLS