cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
749
Views
2
Helpful
4
Replies

PEAP , EAP-TLS and EAP-FAST

dhikra-marghli8
Level 1
Level 1

Hello

i have a question very important :

in which case we will use PEAP , EAP-TLS ans also in witch case use EAP-FAST in  in a network environment ? 

i wait a reply from expert network 

Thanks

 

1 Accepted Solution

Accepted Solutions

@dhikra-marghli8 

PEAP is generally considered insecure and uses username/password. Most endpoint devices support PEAP/MSHCAPv2 such as computers, printers, phones etc.

EAP-TLS certificates is more secure and the standard nowdays and supported by most devices. Some devices such as Wireless APs, IP Phones come with a built-in certificate which can be used for authentication.

EAP-FAST  can combine machine and user authentication for EAP Chaining using PAC files. However EAP-FAST is cisco proprietary and requires using Cisco AnyConnect/Secure Client, you could use TEAP instead.

View solution in original post

4 Replies 4

dhikra-marghli8
Level 1
Level 1

any reply , please !! 

@dhikra-marghli8 

PEAP is generally considered insecure and uses username/password. Most endpoint devices support PEAP/MSHCAPv2 such as computers, printers, phones etc.

EAP-TLS certificates is more secure and the standard nowdays and supported by most devices. Some devices such as Wireless APs, IP Phones come with a built-in certificate which can be used for authentication.

EAP-FAST  can combine machine and user authentication for EAP Chaining using PAC files. However EAP-FAST is cisco proprietary and requires using Cisco AnyConnect/Secure Client, you could use TEAP instead.

from what I know especially in wireless the key factor of select the EAP is the Cert. 
Cert. if need from both Server and client or from Server only or from client only or none of both 
MHM

image_24.jpeg

vsurresh
Level 1
Level 1

I've written blog posts covering TLS, PEAP and TEAP protocols, feel free to check them out here

EAP-TLS - https://www.packetswitch.co.uk/cisco-ise-wired-802-1x-with-eap-tls-example/
EAP-PEAP - https://www.packetswitch.co.uk/cisco-ise-wired-802-1x-with-peap/
EAP-TEAP - https://www.packetswitch.co.uk/cisco-ise-wired-802-1x-with-eap-teap-example/

I haven't used EAP-FAST since the introduction of EAP-TEAP in Windows.