Avaya and EAP-MD5

[Dustin Anderson]

OK,

We are using ISE 2.1 for wireless and are investigating it for wired. All is fine until we tried an Avaya phone.

The phones use EAP-MD5 to pass credential

ISE works fine with it, but I get this error and it skips checking AD.

22043

Current Identity Store does not support the authentication method; Skipping it

Now, we can authenticate on out current RADIUS servers using EAP-MD5, so AD does support it.

We did add the ISE servers to the RAS group to see if that was needed, but still no luck.

Any ideas would be helpful.

[hslai · Accepted solution]

ISE is not support EAP-MD5 when authenticating users in AD. See Table 2 in Manage Users and External Identity Sources of ISE 2.1 Admin Guide.