How does wifi ep and AP authenticated in 802.1x?

[getaway51]

Hi,

I understood tht wifi AP connected via switch ports back to Wifi controller. 

How does the authentication works? Is the cert stored in endpoint authenticated with Wifi controller only? 

Does it means tht I must allowed Wifi AP (connected via switch ports) to permit in ISE? Otherwise all wifi users will fail (i.e. the Wifi AP not connected to port due to Rejected authorization in ISE unless bypass MAB)?   

Wifi AP is authenticated by ISE using MAB?

[saxenanitesh8522 · Accepted solution]

Access Points --> usually are profiled and authenticated and authorized using MAB.

Post successful authorization the AP joins to the WLC.

The deployment of AP and WLC depends if you are using local or flexconnect.