Authentication method is not supported

[gasliu]

Hi Experts,

I have a customer is using 802.1x with AD on ISE 2.0. But the authentication is constantly failed. The Failure reason shows on log as “22064 Authentication method is not supported by any applicable identity store(s)” .

Do you have any experience on it? The customer is using PEAP (MSCHAPv2) as authentication protocol.

Thank you for your help.

[Jason Kunst]

Sounds like they are not setup in there authentication policies with an identity store mapped to the protocol they are using

If using AD should connect domain and choose appropriate groups

https://www.google.com/search?site=&source=hp&ei=9EPMVuPFIIX0jgSd07GIAw&q=22064+authentication+method+is+not+supported+b…

Customer should be contacting TAC if this is production issue

[Timothy Abbott]

There are a couple things you can check:

1. Make sure ISE is joined to AD and security groups are added

2. Ensure that PEAP (MSCHAPv2) is checked in Allowed Protocols

3. Verify that AD is referenced for Wired 802.1X in authentication policy

ISE has intelligent defaults for wired and wireless 802.1X so building authentication policy from scratch should not be needed.

Regards,

-Tim

[gasliu]

Hi Timothy,

The things you mentioned I have already checked.

Best Regards,

Gaspard Liu (刘洪曦) .:|:.:|:.

CCIE Wireless

Travel Plan: