ISE 上做EAP-FAST的时候出现报错client sent result tlv indicating failure

[xuxiaoxunlxl]

ISE 上做EAP-FAST的时候出现报错client sent result tlv indicating failure 。
做EAP-FAST实现用户名密码，证书（PAC）的认证，有相同的案例吗？

[xuxiaoxunlxl]

没有人回答。

[Walter.wu]

https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/99791-eapfast-wlc-rad-config.html
思科的案例，不过是用ISE的
https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/201044-802-1x-authentication-with-PEAP-ISE-2-1.html
这个是用ISE的
https://www.comcol.nl/code/inkijkexemplaar/9781587143250/cisco-ise-for-byod-and-secure-unified-access-engels-aaron-woland.pdf

[xuxiaoxunlxl]

LieBenSun0407 发表于 2019-1-15 14:07
https://www.cisco.com/c/en/us/support/docs/wireless/4400-series-wireless-lan-controllers/99791-eapfa ...

新版的ise..做法好像不一样，总是报错。

[Rockyw]

楼主参考一下下面的文档
Solved: EAP-TLS Authentication failing for client
https://community.cisco.com/t5/other-security-subjects/eap-tls-authentication-failing-for-clients-in-ise/td-p/3383366
Understanding EAP-FAST and Chaining implementations on AnyConnect NAM and ISE
https://www.cisco.com/c/en/us/support/docs/wireless-mobility/eap-fast/200322-Understanding-EAP-FAST-and-Chaining-imp.html