cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1700
Views
15
Helpful
3
Replies

Is dot1x required on the Laptop LAN adapter if AnyConnect is installed

Hi,

 

I have a laptop with AnyConnect installed. The ISE posturing module is also installed. I have the switchport configured with dot1x.

 

Does the LAN adapter on the laptop require dot1x to be configured? Does AnyConnect provide that functionality?

 

Thanks

 

1 Accepted Solution

Accepted Solutions

@Anthony O'Reilly what AnyConnect modules are installed? Just ISE Posture module or NAM (Network Access Manager) as well?

 

The AnyConnect NAM module is used for 802.1x authentication, it would override the Windows native supplicant. If you don't have NAM module installed (with a profile configured) and you haven't configured the Windows native supplicant for 802.1x, then the laptop won't authenticate using 802.1x, but it might authenticate using MAB (if configured on the switchport). You need to configure either the Windows native supplicant or use AnyConnect NAM for 802.1x authentication.

View solution in original post

3 Replies 3

@Anthony O'Reilly what AnyConnect modules are installed? Just ISE Posture module or NAM (Network Access Manager) as well?

 

The AnyConnect NAM module is used for 802.1x authentication, it would override the Windows native supplicant. If you don't have NAM module installed (with a profile configured) and you haven't configured the Windows native supplicant for 802.1x, then the laptop won't authenticate using 802.1x, but it might authenticate using MAB (if configured on the switchport). You need to configure either the Windows native supplicant or use AnyConnect NAM for 802.1x authentication.

Hi Rob,

Only the VPN and ISE posturing modules are installed.
There is no NAM installed on the laptops? Therefore we would require dot1x configured on the LAN adapter on the laptops???

Thanks

@Anthony O'Reilly correct, you need to configure the Windows native supplicant on the LAN adapter. The "Wired AutoConfig" service will need to be started to be able to configure these settings.

 

These settings can be configured centrally via AD GPO (assuming you have a Windows domain), here is an example.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: