802.1x for capwap access-point

[l.buschi]

Hello,

In my wired network I successfully use 802.1x authentication in multi domain and single host modality.

I would like to also authenticate by EAP FAST my capwap access-points. 

The problem is that all my network ports are configured for multi domain (for ip phone) and single host.

Is there a way to let the radius override this configuration setting the port to multi host after the ap has authenticated?

Otherwise I should configure special ports for my access-points loosing flexibility and scalability.

Tks

Johnny

[andre.ortega]

Hi I.buschi,

you could try using Interface template.

You configure the interface template on switch and after authetication ISE tells the switch to use that specific template on the interface where the AP is connected.