EAP-SIM, EAP-AKA, EPS-AKA support

[mamckenn]

Hi all,

I saw a conversation about this from a few years ago. Can someone at Cisco please confirm if ISE supports EAP-SIM, EAP-AKA, or EPS-AKA, of if there are plans to do so. 

If not, do enterprises still have to rely on CPAR, and how would that interoperate with an existing ISE deployment? Or would CPAR be a separate radius implementation with its own policy rules?

Do any enterprises actually use CPAR? it seems to be more for mobile carriers?

thanks

[ahollifield · Accepted solution]

CPAR = Cisco Prime Access Registrar?  I don't know much about the product but my understanding is it is purpose built for the service provider space and does not target enterprise use-cases like ISE.

[Arne Bier]

Hi @mamckenn 

I spent some years working with CPAR and it's a great RADIUS/DIAMETER server for service provider customers. EAP-SIM/AKA requires a lot of backend connectivity to the service provider's HLR (Home Location Register) using SIGTRAN or whatever else they use these days. It's a whole other world. Has no place in Enterprise networking. 

I can't say for sure, but ISE will never support EAP-SIM/AKA etc because Enterprise customers have no means to communicate with a service provider's HLR.

Are you asking in relation to OpenRoaming perhaps?

[mamckenn]

Hi, can someone at Cisco please give the the definitive answer for this please.  Please don't try to second guess the architecture, at this stage i just simply need to know if ISE supports EAP-SIM, EAP-AKA, or EPS-AKA, of if there are plans to do so. thanks

[ahollifield]

Did you see the screenshot I posted? That is from ISE 3.1 and shows you all of the supported EAP types. Secondly road map items are typically never discussed in a public form like this. Also, if you *must* have an answer from a Cisco employee I would think your Cisco account team would be the best place to ask rather than a public forum.