cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
3393
Views
5
Helpful
3
Replies

IPhones problem with ISE authentication

Hi all,

I have a problem with iphones about authenticating them against ISE. I have recently deployed wireless with Mobility Express Access Points. I have created several SSIDs one for corporate computers for authenticating using Chaining and another for mobile phones just with enterprise authentication. The problem is Androids pass authentication successfully but Apple devices not. I see in ISE strange error. Below you can see it as well. I was going to open TAC case but thought to ask from the forum beforehand.

Capture.JPG

I am not sure why IPhones try to authenticate using EAP-Fast isntead of PEAP. 

Hope someone will help.

Thanks in advance!

2 Accepted Solutions

Accepted Solutions

Surendra
Cisco Employee
Cisco Employee
Looks like your IPhones are not configured to send crypto binding TLV. Suggest you to check the EAP-FAST settings on the IPhone. If you have provisioned the settings through apple configurator 2, please send the screenshots of the profile as well. If you think that your IPhone is supposed to do PEAP and not EAP-FAST, then it definitely is a configuration issue on the IPhone.

View solution in original post

Yes, that is surely configuration error of Apple devices. Unfortunately, I do not have MAC in hand so that I will use configurator. Instead I created separate Policy Set with condition of particular SSID which accepts only PEAP in allowed protocols. In that way I could force Iphones use PEAP not EAP-FAST. Sometimes just posting question here makes me find solution :) Thanks anyway

View solution in original post

3 Replies 3

Surendra
Cisco Employee
Cisco Employee
Looks like your IPhones are not configured to send crypto binding TLV. Suggest you to check the EAP-FAST settings on the IPhone. If you have provisioned the settings through apple configurator 2, please send the screenshots of the profile as well. If you think that your IPhone is supposed to do PEAP and not EAP-FAST, then it definitely is a configuration issue on the IPhone.

Yes, that is surely configuration error of Apple devices. Unfortunately, I do not have MAC in hand so that I will use configurator. Instead I created separate Policy Set with condition of particular SSID which accepts only PEAP in allowed protocols. In that way I could force Iphones use PEAP not EAP-FAST. Sometimes just posting question here makes me find solution :) Thanks anyway

tomhoodjs
Level 1
Level 1

If you’re facing an “Apple ID Verification Failed” error on your iPhone, there are several things you can do to resolve it. Start by checking your internet connection, as a stable connection is crucial for Apple ID verification. If you’re on Wi-Fi, try switching to cellular data, or vice versa, to see if that helps. Sometimes, simply toggling Airplane Mode on and off can reset your connection and resolve the issue.

If the connection isn’t the problem, the issue might be with Apple’s servers. Occasionally, Apple’s services go down or experience temporary issues. You can check the status of Apple’s servers by visiting the Apple System Status page online. If there’s a known issue, you may just need to wait until it’s resolved.

Another possible fix is to sign out of your Apple ID and sign back in. Go to “Settings,” tap on your name at the top, and scroll down to “Sign Out.” After signing out, restart your iPhone, and then sign back in with your Apple ID. This process can refresh your connection to Apple’s servers and often resolves the verification error.

If none of these solutions work, you can try to follow more instruction below.

https://thegeekpage.com/apple-id-verification-failed-on-iphone/