topic eap-fast problem in Wireless

eap-fast problem

xuanhuymai — Sun, 04 Jul 2021 02:19:51 GMT

Hi all,

I use eap-fast on Cisco ACS to authenticate mobile carts. However, one a month I have to re-authorized those mobile carts. I seem like the mobile carts fail to authenticate in group every month; on some of them I have to re-authenticate every month; some works just fine. I have to select the PAC file on the client to re-authenticate. Any one have any idea how to config the eap-fast on ACS to let clients provison automatically? Thank in advantage.

Re: eap-fast problem

Tiago Antunes — Mon, 25 Oct 2010 12:54:13 GMT

Hi,

As we are not sure of what version of ACS you are using, i will give you examples for ACS 4.x and 5.x.

ACS 4.x:

http://www.cisco.com/en/US/tech/tk722/tk720/technologies_configuration_example09186a00807bf3c8.shtml#enaeap.

ACS 5.x:

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.2/user/guide/access_policies.html#wp1053293.

Choose the Allow in-band PAC provisioning field. This field enables Automatic PAC Provisioning for properly-enabled EAP-FAST clients.

HTH,

Tiago

If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.

Re: eap-fast problem

xuanhuymai — Mon, 25 Oct 2010 13:17:41 GMT

Tiago,

I use ACS ver 4.1 and I do have allow anonymous in-band PAC provisioning; allow authenticated in-band PAC provisioning checked. Do you have any idea where else do I have to look?

Thanks.

Re: eap-fast problem

Tiago Antunes — Wed, 27 Oct 2010 08:52:34 GMT

Hi,

Youmay want to look into your PAC timers.

Please check the screenshot in attach.

HTH,
Tiago

If this helps you and/or answers your question please mark the question as "answered" and/or rate it, so other users can easily find it.