ISE 3.2 and HPE 5130 switch TEAP compatibility

[mtar]

Hello!

If we want to use TEAP with windows native client, should the switch which handles the 802.1x sessions support TEAP protocol?

Specifically HPE 5130 switches, which is based on the Datasheet support 802.1x, but does that contain TEAP also?

Thanks!

[Greg Gibbs · Accepted solution]

TEAP is mainly a function between the client supplicant and the AAA server (ISE, in this case). If the switch supports 802.1x, it should support TEAP, but for confirmation you would need to contact the vendor (HP).

[mtar]

Hello Greg!

Hopefully I found the answer in the TEAP RFC:

"TEAP packets are encapsulated within EAP; EAP in turn requires atransport protocol. TEAP packets encapsulate TLS, which is then usedto encapsulate user authentication information. Thus, TEAP messagingcan be described using a layered model, where each layer encapsulatesthe layer above it."

Based on this, if the switch support 802.1x and EAP(over LAN), all other protocolls in the upper layer also.

BR