topic lwapp capwap AP to act as a supplicant on a 802.1x enabled switch port in Wireless

lwapp capwap AP to act as a supplicant on a 802.1x enabled switch port

Rasmus Kiilerich — Sun, 04 Jul 2021 08:00:55 GMT

All our switchports is configured to validate the connected device with 802.1x

However when a wireless accesspoint, that is running FlexConnect, is connected I have to make a "mac bypass" on the AP mac addess and add the multihost command to the port config.

I really like to move away from the mac bypass, but keep the multihost command, and install a certificat on the AP. Have anyone any ideas about how to get the AP itself to auth?

Re: lwapp capwap AP to act as a supplicant on a 802.1x enabled s

Scott Fella — Sat, 05 Oct 2013 17:52:58 GMT

There isn't a way to have an AP authenticate on a switchport setup for 802.1x. Mac bypass is the only way. Like on ISE, the switch can detect it's an access port and or phone and reconfigure the switchport for that type of device. Normal 802.1x on a switchport will not work for an AP.

Sent from Cisco Technical Support iPhone App

lwapp capwap AP to act as a supplicant on a 802.1x enabled switc

Amjad Abdullah — Mon, 07 Oct 2013 10:07:25 GMT

Hi,

The AP can act as 802.1x supplicant if it is connected to a 802.1x enabled switch port.

Cisco unified APs however supports only EAP-FAST as the EAP method.

Here is a config example, hope it'll be useful.

http://goo.gl/HMbiHL

Regards,

Amjad

Rating useful replies is more useful than saying "Thank you"

This is the correct answer.

Luke Marrott — Fri, 16 May 2014 01:40:42 GMT

This is the correct answer.