topic Local EAP/PEAP question in Wireless https://community.cisco.com/t5/wireless/local-eap-peap-question/m-p/1034535#M10897 <P>we have a wlan using 802.1x and wpa2. We have a guy who wants to get on without being on our domain.</P><P></P><P>is local eap the only way? Is there a way we could manually install certificates on client side? kinda bypassing peap certificate process?</P><P></P><P></P><P>i was thinking about mac filtering, when i turn on mac filtering on the wlan on the littel checkbox, does it disablet he other layer 3 security and mac all users use mac filtering?</P><P></P><P>Is there a way to use 802.1x and mac filtering?</P> Sat, 03 Jul 2021 23:34:59 GMT thompso7540 2021-07-03T23:34:59Z Local EAP/PEAP question https://community.cisco.com/t5/wireless/local-eap-peap-question/m-p/1034535#M10897 <P>we have a wlan using 802.1x and wpa2. We have a guy who wants to get on without being on our domain.</P><P></P><P>is local eap the only way? Is there a way we could manually install certificates on client side? kinda bypassing peap certificate process?</P><P></P><P></P><P>i was thinking about mac filtering, when i turn on mac filtering on the wlan on the littel checkbox, does it disablet he other layer 3 security and mac all users use mac filtering?</P><P></P><P>Is there a way to use 802.1x and mac filtering?</P> Sat, 03 Jul 2021 23:34:59 GMT https://community.cisco.com/t5/wireless/local-eap-peap-question/m-p/1034535#M10897 thompso7540 2021-07-03T23:34:59Z Re: Local EAP/PEAP question https://community.cisco.com/t5/wireless/local-eap-peap-question/m-p/1034536#M10898 <HTML><HEAD></HEAD><BODY><P>Why not just create another ssid and map that to the same subnet. This way you don't have to touch the client side. Are you using autonomous or lwapp AP's? Also, are you doing machine authentication or AD credentials?</P></BODY></HTML> Thu, 09 Oct 2008 02:54:44 GMT https://community.cisco.com/t5/wireless/local-eap-peap-question/m-p/1034536#M10898 Scott Fella 2008-10-09T02:54:44Z Re: Local EAP/PEAP question https://community.cisco.com/t5/wireless/local-eap-peap-question/m-p/1034537#M10899 <HTML><HEAD></HEAD><BODY><P>this is lwapp on 4404 4.2.129 cade. </P><P></P><P>we are doing ad peap/ms-chapv2 through cisco secure acs</P><P></P><P>802.1x WPA2</P><P></P><P>we would need it to be on the same ssid. </P><P></P><P>any wway to get on besides local eap?</P></BODY></HTML> Thu, 09 Oct 2008 11:42:28 GMT https://community.cisco.com/t5/wireless/local-eap-peap-question/m-p/1034537#M10899 thompso7540 2008-10-09T11:42:28Z Re: Local EAP/PEAP question https://community.cisco.com/t5/wireless/local-eap-peap-question/m-p/1034538#M10900 <HTML><HEAD></HEAD><BODY><P>this is lwapp on 4404 4.2.129 cade. </P><P></P><P>we are doing ad peap/ms-chapv2 through cisco secure acs</P><P></P><P>802.1x WPA2</P><P></P><P>we would need it to be on the same ssid. </P><P></P><P>any wway to get on besides local eap?</P></BODY></HTML> Thu, 09 Oct 2008 11:44:09 GMT https://community.cisco.com/t5/wireless/local-eap-peap-question/m-p/1034538#M10900 thompso7540 2008-10-09T11:44:09Z Re: Local EAP/PEAP question https://community.cisco.com/t5/wireless/local-eap-peap-question/m-p/1034539#M10901 <HTML><HEAD></HEAD><BODY><P>You can setup a username and password on ACS and make sure that the Groups is setup to also autneticate using local databe and not just windos database or what ever database you are pointing to.</P></BODY></HTML> Thu, 09 Oct 2008 13:20:18 GMT https://community.cisco.com/t5/wireless/local-eap-peap-question/m-p/1034539#M10901 Scott Fella 2008-10-09T13:20:18Z Re: Local EAP/PEAP question https://community.cisco.com/t5/wireless/local-eap-peap-question/m-p/1034540#M10902 <HTML><HEAD></HEAD><BODY><P>ok so</P><P></P><P>basicaly the 2 options are...</P><P></P><P>1) Create local net user on controller, and use local eap...</P><P> -local eap can be used in concurrent with 802.1x eap/wpa2 correct?</P><P></P><P>What i mean is i can check the local eap box and use 802.1x eap and local eap at the same time</P><P></P><P></P><P>2) create a local username/password on acs to authenticate locally? Will that require username on active directory?</P><P></P><P>those 2 options?</P></BODY></HTML> Tue, 14 Oct 2008 19:03:47 GMT https://community.cisco.com/t5/wireless/local-eap-peap-question/m-p/1034540#M10902 thompso7540 2008-10-14T19:03:47Z