topic Can SDA support eCert authentication? in Software-Defined Access (SD-Access)

Can SDA support eCert authentication?

Rich Yim — Wed, 02 Sep 2020 11:31:42 GMT

I know SD Access can assign a port with closed authentication template for 802.1x authentication. I would like to know can the port authenticate user using eCert authentication?

Re: Can SDA support eCert authentication?

jedolphi — Fri, 04 Sep 2020 03:33:45 GMT

Hi Rich. More information required please. What is an "eCert" and how does the customer want to use it in the authentication process? I did a few quick searches for "eCert" but can't find anything conclusive. Jerome

Re: Can SDA support eCert authentication?

Rich Yim — Fri, 04 Sep 2020 04:04:15 GMT

Sorry that I should not use the term eCert authentication. What I am looking for is to use EAP-TLS for authentication. Some customers want to adopt BYOD. Then they will use MDM to enrol electronics certificate to their notebook or tablet. My ask is can we use the 802.1x authentication on our Fabric Edge to do the EAP-TLS authentication?

I saw a Cisco link for the setup of the ISE for EAP-TLS:

https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/214975-configure-eap-tls-authentication-with-is.html

Moreover, there is a youtube available for EAP-TLS:

https://www.youtube.com/watch?v=EHchrxUTtTg

I did not have time to test it on my SDA lab yet. Therefore, I don't know if it will work.