topic Re: PEAP , EAP-TLS and EAP-FAST in Network Access Control

PEAP , EAP-TLS and EAP-FAST

dhikra-marghli8 — Sun, 31 Dec 2023 06:03:22 GMT

Hello

i have a question very important :

in which case we will use PEAP , EAP-TLS ans also in witch case use EAP-FAST in in a network environment ?

i wait a reply from expert network

Thanks

Re: PEAP , EAP-TLS and EAP-FAST

dhikra-marghli8 — Sun, 31 Dec 2023 07:44:00 GMT

any reply , please !!

Re: PEAP , EAP-TLS and EAP-FAST

Rob Ingram — Sun, 31 Dec 2023 08:56:00 GMT

@dhikra-marghli8

PEAP is generally considered insecure and uses username/password. Most endpoint devices support PEAP/MSHCAPv2 such as computers, printers, phones etc.

EAP-TLS certificates is more secure and the standard nowdays and supported by most devices. Some devices such as Wireless APs, IP Phones come with a built-in certificate which can be used for authentication.

EAP-FAST can combine machine and user authentication for EAP Chaining using PAC files. However EAP-FAST is cisco proprietary and requires using Cisco AnyConnect/Secure Client, you could use TEAP instead.

Re: PEAP , EAP-TLS and EAP-FAST

MHM Cisco World — Sun, 31 Dec 2023 10:09:34 GMT

from what I know especially in wireless the key factor of select the EAP is the Cert.
Cert. if need from both Server and client or from Server only or from client only or none of both
MHM

Re: PEAP , EAP-TLS and EAP-FAST

vsurresh — Tue, 02 Jan 2024 14:03:17 GMT

I've written blog posts covering TLS, PEAP and TEAP protocols, feel free to check them out here

EAP-TLS - https://www.packetswitch.co.uk/cisco-ise-wired-802-1x-with-eap-tls-example/
EAP-PEAP - https://www.packetswitch.co.uk/cisco-ise-wired-802-1x-with-peap/
EAP-TEAP - https://www.packetswitch.co.uk/cisco-ise-wired-802-1x-with-eap-teap-example/

I haven't used EAP-FAST since the introduction of EAP-TEAP in Windows.