Hi,
I am little confused how PAC works.
With TrustSec, a PAC key is manually configured on the switch instead of the RADIUS key.
By looking at how PAC works, it seems that ISE generates PAC Random Key, PAC-Opaque and A-ID. This all together is called PAC and it is then sent to the switch.
Why now two PAC keys? When is the first key used then? Is it used maybe do encrypt the newly generated PAC sent from ISE to the switch?
Is the second PAC key used as some kind of session key which switch uses to encrypt the PAC-Opaque when sent back to ISE?
What am I missing?
