Setup PEAP on a Wired Network

[donovanrodriguez9726]

Hello everyone,

I have a bit of a weird situation I'm trying to get working. 

Lets say I have this theoretical setup. What I'm trying to do is configure some sort of 802.1x authentication over these wired links. So the ActiveDirectory machine is a Windows Domain Controller running NPS as a radius server. I already use NPS for radius authentication when SSHing into the switch. I've been looking at setting up PEAP but haven't found much documentation. I'm trying to make it so the endpoints themselves, not a user on the endpoint, authenticate with the AD server before the switch ports open up and allow them access to the rest of the network. Is there some guide that would walk you through configuring this sort of thing? Thanks for the help! 

[MHM Cisco World]

https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Security/TrustSec_1-99/Dot1X_Deployment/Dot1x_Dep_Guide.html

[donovanrodriguez9726]

I did read through this but it didn't go through the exact way on how to
configure this, just went over the different eap types and the concepts
behind it, not the exact way to configuration steps.

[MHM Cisco World]

http://www.remotelabs.com/ldhtm/Gb/cisco/4879b/4879_05.htm

[M02@rt37 · Accepted solution]

Hello @donovanrodriguez9726,

please read this: https://community.cisco.com/t5/network-access-control/configure-wired-802-1x-with-nps/td-p/3817860

https://sharifulhoque.blogspot.com/2019/08/8021x-wired-authentication-with-cisco.html

[donovanrodriguez9726]

This is exactly what I was looking for. Thanks a ton! 

[M02@rt37]

You're welcome @donovanrodriguez9726