topic Re: EAP-SIM, EAP-AKA, EPS-AKA support in Network Access Control

EAP-SIM, EAP-AKA, EPS-AKA support

mamckenn — Tue, 09 May 2023 15:59:48 GMT

Hi all,

I saw a conversation about this from a few years ago. Can someone at Cisco please confirm if ISE supports EAP-SIM, EAP-AKA, or EPS-AKA, of if there are plans to do so.

If not, do enterprises still have to rely on CPAR, and how would that interoperate with an existing ISE deployment? Or would CPAR be a separate radius implementation with its own policy rules?

Do any enterprises actually use CPAR? it seems to be more for mobile carriers?

thanks

Re: EAP-SIM, EAP-AKA, EPS-AKA support

ahollifield — Tue, 09 May 2023 17:32:03 GMT

CPAR = Cisco Prime Access Registrar? I don't know much about the product but my understanding is it is purpose built for the service provider space and does not target enterprise use-cases like ISE.

Re: EAP-SIM, EAP-AKA, EPS-AKA support

Arne Bier — Wed, 10 May 2023 00:32:21 GMT

Hi @mamckenn

I spent some years working with CPAR and it's a great RADIUS/DIAMETER server for service provider customers. EAP-SIM/AKA requires a lot of backend connectivity to the service provider's HLR (Home Location Register) using SIGTRAN or whatever else they use these days. It's a whole other world. Has no place in Enterprise networking.

I can't say for sure, but ISE will never support EAP-SIM/AKA etc because Enterprise customers have no means to communicate with a service provider's HLR.

Are you asking in relation to OpenRoaming perhaps?

Re: EAP-SIM, EAP-AKA, EPS-AKA support

mamckenn — Wed, 10 May 2023 11:17:25 GMT

Hi, can someone at Cisco please give the the definitive answer for this please. Please don't try to second guess the architecture, at this stage i just simply need to know if ISE supports EAP-SIM, EAP-AKA, or EPS-AKA, of if there are plans to do so. thanks

Re: EAP-SIM, EAP-AKA, EPS-AKA support

ahollifield — Wed, 10 May 2023 12:32:20 GMT

Did you see the screenshot I posted? That is from ISE 3.1 and shows you all of the supported EAP types. Secondly road map items are typically never discussed in a public form like this. Also, if you *must* have an answer from a Cisco employee I would think your Cisco account team would be the best place to ask rather than a public forum.