ISE:Doubt on eap-chaining

emgalanme — Fri, 21 Feb 2020 12:56:37 GMT

Hello guys,

I would like to use eap-chaining for my ISE deployment so host and user name can be send, chained and authenticated so i only allow full access to corporate devices and users. The thing is i am not using EAP-TLS, no user certificate... Eap chaining depends of eap-fast to work?? Didnt understand that part.

What can I do to still use the eap chaining without having eap-tls deployment?

Thanks!!

Emilio

ISE:Doubt on eap-chaining

hariholla — Mon, 05 Aug 2013 05:18:34 GMT

Hi Emillo,

Yes EAP-Chaining uses EAP-FASTv2 and doesnt require certificates.

For details on how to setup EAP-Chaining, refer this how-to-guide :

http://www.cisco.com/en/US/solutions/collateral/ns340/ns414/ns742/ns744/docs/howto_80_eapchaining_deployment.pdf

The profile editor mentioned in the guide can be downloaded from here:

http://software.cisco.com/download/release.html?mdfid=283000185&softwareid=282364313&release=3.1.03103

Refer this video on ciscolive365 for details on its functionality (need to register a free account) :

https://www.ciscolive365.com/connect/sessionDetail.ww?SESSION_ID=6039&backBtn=true

HTH

-Hari

topic ISE:Doubt on eap-chaining in Network Security

ISE:Doubt on eap-chaining

ISE:Doubt on eap-chaining