ISE: PEAP-TLS

[Tim Lewis]

Hi,

I want to setup ISE for certificate authentication of the device + AD credentials (PEAP+TLS) as far as I understood it.

I can't find any good example of how to setup ISE policies for this scenario.

Client will use Microsoft CA and he will deploy certificates on the domain computers before they can join wireless, so I don't need self enrollment and hopefully no any kind of supplicant (just windows native one).

If you can point me to some design or configuration guide, I would be thankful.

Best regards,

Michael

[Venkatesh Attuluri · Accepted solution]

Refer to the following links this  might be  of help

http://www.cisco.com/en/US/docs/security/ise/1.0/user_guide/ise10_auth_pol.html#wp1146236

https://www.cisco.com/en/US/docs/solutions/Enterprise/Security/TrustSec_2.0/trustsec_2.0_dig.pdf