EAP Chaining user, machine, rsa with iSE

[frosty074]

Hi,

Is there any way to configure the following using ISE and Anyconnect/NAM module:

eap-chaining:

1. USER auth, Machine fail = Internet (works)

2. User auth, Machine auth = limited corporate (works)

3. User auth, Machine auth, RSA auth = Full (not sure about this one)

Ideally we'd like the RSA prompts to appear on the successful completion of user/machine auth.

Alternatively can we prompt RSA, and it that fails still test User/Machine?

Thanks,

[Anas Naqvi]

Please check the following document, will be helpful in your scenarios,

http://www.cisco.com/en/US/solutions/collateral/ns340/ns414/ns742/ns744/docs/howto_80_eapchaining_deployment.pdf