topic Re: Setup PEAP on a Wired Network in Network Access Control

Setup PEAP on a Wired Network

donovanrodriguez9726 — Tue, 18 Jul 2023 20:51:32 GMT

Hello everyone,

I have a bit of a weird situation I'm trying to get working.

Lets say I have this theoretical setup. What I'm trying to do is configure some sort of 802.1x authentication over these wired links. So the ActiveDirectory machine is a Windows Domain Controller running NPS as a radius server. I already use NPS for radius authentication when SSHing into the switch. I've been looking at setting up PEAP but haven't found much documentation. I'm trying to make it so the endpoints themselves, not a user on the endpoint, authenticate with the AD server before the switch ports open up and allow them access to the rest of the network. Is there some guide that would walk you through configuring this sort of thing? Thanks for the help!

Re: Setup PEAP on a Wired Network

MHM Cisco World — Tue, 18 Jul 2023 20:57:15 GMT

https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Security/TrustSec_1-99/Dot1X_Deployment/Dot1x_Dep_Guide.html

Re: Setup PEAP on a Wired Network

donovanrodriguez9726 — Tue, 18 Jul 2023 21:59:14 GMT

I did read through this but it didn't go through the exact way on how to
configure this, just went over the different eap types and the concepts
behind it, not the exact way to configuration steps.

Re: Setup PEAP on a Wired Network

MHM Cisco World — Tue, 18 Jul 2023 22:06:50 GMT

http://www.remotelabs.com/ldhtm/Gb/cisco/4879b/4879_05.htm

Re: Setup PEAP on a Wired Network

M02@rt37 — Wed, 19 Jul 2023 06:39:40 GMT

Hello @donovanrodriguez9726,

please read this: https://community.cisco.com/t5/network-access-control/configure-wired-802-1x-with-nps/td-p/3817860

https://sharifulhoque.blogspot.com/2019/08/8021x-wired-authentication-with-cisco.html

Re: Setup PEAP on a Wired Network

donovanrodriguez9726 — Wed, 19 Jul 2023 12:37:08 GMT

This is exactly what I was looking for. Thanks a ton!

Re: Setup PEAP on a Wired Network

M02@rt37 — Wed, 19 Jul 2023 12:48:19 GMT

You're welcome @donovanrodriguez9726