EAPOL version and dot1x version on a catalyst switch

[harrzhan]

We are testing an AXIS camera with dot1x that connects to a 3650 switch.

On the camera, we can only select version 2 EAPOL, but the switch is on dot1x version 3. the error always complains on the supplicant declining the EAP method proposed. 

11510 Supplicant declined EAP method selected by Authentication Policy...

Is this the cause? or is this a problem on ISE side, or a problem with the certificate?

[howon · Accepted solution]

Enable all EAP-Types from the 'Allowed Protocols' for the authentication policy. This will let ISE accept any EAP types that is supported by ISE.