Migration ACS to ISE: LDAP question

[chorl0232]

Hello,

I'm planning migration from ACS 3.3 to a new machine, so I'm thinking about new Cisco ISE.

I have the following question: ACS 3.3 acts as AAA RADIUS with LDAP repositoriy for wireless deployment, using PEAP-GTC. Is possible, with ISE, to use a different EAP method, such as PEAP-MsCHAPv2 or EAP-TTLS?

In ACS 5.X I think it's only supported PEAP-GTC and EAP-TLS when identity repository is LDAP. Is the same in Cisco ISE?

Kind regards,

Ignacio Siles.

[jrabinow]

It is the same in ISE. PEAP-MsCHAPv2 cannot be used when identity repository is LDAP. EAP-TTLS is not supported

[Federico Lovison]

Just adding the link to the documentation about this:

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_man_id_stores.html#wp1090065

Cheers,

Federico