topic Re: IEEE 802.1x AP authentication on Catalyst 9800 WLC in Wireless

IEEE 802.1x AP authentication on Catalyst 9800 WLC

MayuranParanirupasingam3107 — Mon, 05 Jul 2021 19:14:01 GMT

What is the default IEEE 802.1x AP authentication configuration on a Cisco Catalyst 9800 Series Wireless Controller ?

patoberli — Tue, 07 Jul 2020 11:11:10 GMT

I think the default is disabled and don't use 802.1x on the LAN side.

dal — Thu, 07 Jan 2021 11:50:05 GMT

I think I need to wake up this thread.

But it only shows how to set up PEAP as authentication method.

But I want to use EAP-TLS, and that is only partially explained.

And what I don't understand is, where to upload the necessary certificates, both to the AP and to the WLC

Anyone?

Thanks.

Ric Beeching — Fri, 08 Jan 2021 03:23:41 GMT

What are you trying to achieve here? Is it AP .1x authentication with the wired port or just .1x authentication with the WLC?

Either way you need to upload the certificates to the WLC which will act as a certificate enrollment proxy for the APs using SCEP.

Instructions are in this link to setup a new trustpoint on the WLC for this: