Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Hi all,I am in the process of configuring corporate WiFi with the following setup:ISE 3.1 with a premium license, and a WLC Catalyst 9800-LWindows 10 laptops joined to a domain, featuring duo authentication without user certificatesThe laptops are eq...
Dear @Aref Alsouqi Thank you for your insightful and detailed response.As I grasp it, for machine authentication/authorization, we can deploy 802.1x+EAP-TLS with a certificate. This approach negates the necessity for a second 802.1x authentication fo...
There may be aspects I'm not fully aware of. It seems that once network connectivity has been established via machine authentication, user authentication and authorization might not rely on EAP, but could instead be managed through Kerberos. This lea...
@Rob Ingram thank you for replay. My understanding that adjustments need to be made on the ISE stems from these specific excerpts from the RFC:"The certificate_request message is included when the server desires the peer to authenticate itself via pu...