cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements
307
Views
0
Helpful
1
Replies
Highlighted
Enthusiast

Multiple EAP types mapped on to the single SSID

Hello Experts, 

 

I could see that there's an option to map multiple EAP types on an EAP profile, which eventually gets assigned to a WLAN. 

What will be the order or precedence in which the client will then attempt the EAP-Types to try authentication?

 

Local EAP profiles.PNG

 

 

MApping EAP profile on WLAN.png

Everyone's tags (6)
1 REPLY 1
Rising star

Re: Multiple EAP types mapped on to the single SSID

Hi,

 

These local profile will only apply if you are using the WLC as the Authentication Server (AS). Generally people use external servers such as Microsoft AD/NPS, Cisco ISE or Cisco ACS etc and the EAP type is determined there along with authentication.

 

However, if you are using local auth with these profiles, then I believe the client can choose to use any type of auth in that list and there is no hierarchy, the same as if you were using these profiles on your external server. In corporate environments this is often managed through profiles on the client e.g using a group policy in windows to push out a "EAP-TLS" only profile etc.

 

Ric 

-----------------------------
Please rate helpful / correct posts
CreatePlease to create content
Content for Community-Ad
August's Community Spotlight Awards