Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi everyone,Some time ago, I configured an SSID using 802.1X authentication with NPS, and it has been working correctly.Now, I need to add a new SSID to the same NPS server. In this case, the computer that will connect to the SSID is not joined to th...
Hi everyone,I have a question regarding wireless authentication with 802.1X.Previously, I configured wireless access using only a machine certificate for authentication, and it worked as expected.Now, I would like to implement the same setup for mobi...
Hi everyone,I experienced an issue yesterday with a Cisco C9350-48T stack running IOS XE version 17.18.03a.The stack consists of 7 members. During the initial installation, I was unable to fully close the stack ring because the available stacking cab...
Hi everybody,I’m planning to implement a guest portal with self-registration in my company. Currently, we use a very outdated method where the guest Wi-Fi password is changed every day, which I don’t think is a good solution.I have proposed creating ...
Hi everyone,I want to do a project to set up employee Wi-Fi using 802.1X with EAP-TLS (user certificates).I have a question about how I should implement it. It might be a simple question, but currently I’m connected to a company access point. My idea...
Thanks @aleabrahao To be precise about my mobile scenario:- 1000+ Android/iOS phones, managed by Intune, NOT domain-joined and NOT present in on-prem AD.- EAP-TLS with a DEVICE certificate from our AD CS (via Intune SCEP/PKCS).- Windows NPS as RADIUS...
Okay, I understand, but I would like to understand the technical reason why this doesn't work.Is it mandatory for a device to be domain-joined when using NPS with 802.1X certificate-based authentication? My assumption is that NPS needs the device to ...
The company doesn't want this machine to be joined to the domain because it is only being used for testing purposes.Is there any way to make 802.1X authentication work with NPS without the machine being domain-joined and without using certificate-bas...
I changed the global password and confirmed that it is correct, but I'm still seeing error code 3 in Wireshark.I also added the Called-Station-ID to the NPS policy, using the same value I can see in Wireshark. In my case, the attribute shows the SSID...
I have a question. The certificate is issued to the machine name, including the company domain (machine.company.com), and the CA belongs to the company domain as well.However, this PC is not joined to the domain. Could this be the problem? I'm not su...