802.1x authentication using DUO MFA

[A.Manoj]

Hi All, 

I'm trying to test the usage of DUO integrated with ISE. Is it possible to achieve dot1x authentication which can be utilized in both Windows/MAC supplicants?

Is it possible to achieve the same with EAP-GTC via NAM client? Can anyone guide me on this regard?

[Adan Correa1]

See this post: 

https://www.wwt.com/video/cisco-ise-8021x-with-duo-mfa

[Greg Gibbs]

While this is technically possible with Windows using NAM with EAP-GTC, it is a terrible user experience. Any time the user disconnects/reconnects or transitions between wired and wireless, they will be prompted for their user credentials and MFA.

The MacOS supplicant does not support EAP-GTC, so it is not possible on MacOS.