Apple 12.4.1 does support Cisco ISE 2.4 on Meraki for BYOD

[ricky.kocharekar@orange.com]

We were migrate one of are location and found user was having the new release Apple iPhone iOS version 12.4.1.

He was not able to connect the BYOD. When we check in the Cisco ISE (2.4 ver). He was getting

FailureReason

12944 Supplicant stopped responding to ISE during PEAPv1 protected termination

User-Agent

Mozilla/5.0 (iPhone; CPU iPhone OS 12_4_1 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.1.2 Mobile/15E148 Safari/604.1

Event5200 Authentication succeeded

Kindly please suggest.

[Dustin Anderson · Accepted solution]

Usually, when the supplicant stops responding, it either didn't trust the cert or something else. Did they user get prompted with a cert to trust during the connection attempt?

If they didn't get prompted for cert, have them forget the network and reboot the phone. This usually fixes cert issues for me when they don't get prompted.

[Jason Kunst · Accepted solution]

If this is a single SSID flow where you’re onboarding and also using eap-TLS on same WLAN then you will need to toggle WiFi . Apple bug

Please check http://cs.co/ise-byod

Specifically endpoint notes https://community.cisco.com/t5/security-documents/ise-byod/ta-p/3641689#toc-hId-1855030267