Access Point EAP-FAST PnP implementation

[hugo.girard]

Hello,

I would like to implement 802.1x on AP connected on Catalyst 9300.

The method used will be EAP-FAST.

I have directly configured the 802.1x credentials and the EAP-FAST on the Catalyst 9800 WLC and it works well.

With the new DNAC version, it is possible to configure this feature directly into DNAC (please see attached file AP_PnP_authentication.jpg) 

Unfortunately, I have the following error message during AP PnP process :

AP PNP Claim failed. ISE EAP Root CA certificate is not available. Please re-integrate ISE with DNAC

I have chosen the EAP-FAST method (credentials) in order not to have to manage certificates. I don't understand why DNAC want to implement an ISE certificate.

Regards,

Hugo

[Mike.Cifelli]

AP PNP Claim failed. ISE EAP Root CA certificate is not available. Please re-integrate ISE with DNAC

-Out of curiosity if you navigate to system360 is the status with the connection to ISE via pxgrid up or down? Have you attempted to edit AAA server and essentially force re-sync of the integration to see if that helps? What version of dnac are you running? 

[hugo.girard]

Hi Mike,

Everything is ok on the system 360 :

ISE :

Secondary : available

Primary : available

Pxgrid-Acrive : available

Pxgrid-Standby : available