PEAP , EAP-TLS and EAP-FAST

[dhikra-marghli8]

Hello

i have a question very important :

in which case we will use PEAP , EAP-TLS ans also in witch case use EAP-FAST in  in a network environment ? 

i wait a reply from expert network 

Thanks

[dhikra-marghli8]

any reply , please !! 

[Rob Ingram · Accepted solution]

@dhikra-marghli8 

PEAP is generally considered insecure and uses username/password. Most endpoint devices support PEAP/MSHCAPv2 such as computers, printers, phones etc.

EAP-TLS certificates is more secure and the standard nowdays and supported by most devices. Some devices such as Wireless APs, IP Phones come with a built-in certificate which can be used for authentication.

EAP-FAST  can combine machine and user authentication for EAP Chaining using PAC files. However EAP-FAST is cisco proprietary and requires using Cisco AnyConnect/Secure Client, you could use TEAP instead.

[MHM Cisco World]

from what I know especially in wireless the key factor of select the EAP is the Cert. 
Cert. if need from both Server and client or from Server only or from client only or none of both 
MHM

[vsurresh]

I've written blog posts covering TLS, PEAP and TEAP protocols, feel free to check them out here

EAP-TLS - https://www.packetswitch.co.uk/cisco-ise-wired-802-1x-with-eap-tls-example/
EAP-PEAP - https://www.packetswitch.co.uk/cisco-ise-wired-802-1x-with-peap/
EAP-TEAP - https://www.packetswitch.co.uk/cisco-ise-wired-802-1x-with-eap-teap-example/

I haven't used EAP-FAST since the introduction of EAP-TEAP in Windows.