cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
522
Views
0
Helpful
4
Replies

Certificate Authentication for wireless communication issues

Hi All,

 

 Currently we have implemented WLC & AP in our n/w & as per client requirement their Laptop should connect AP through EAP-TLS certificate authentications. But point is client laptops are not in our domain and we can not take it our domain.

So my request is to please suggest if we can implement this in such case for client laptops.

If yes, then please let me know which certificates need to be installed on client laptops and which on ACS to wireless communications.

4 REPLIES 4
Aravind Ravichandran
Participant

Hello,

BYOD option is there in ISE whereas, user has to connect to dot1x SSID by entering their domain credentials which will keep the endpoint in limited access ACL to enroll certificate(internal or external-CA server) by registering the device in BYOD portal & you can achieve the EAP-TLS on client laptop.

ISE can be integrated with CA server for external certificate enrollment or else ISE is having option of providing internal CA certificate.

Am not sure, whether this option is available in ACS or not.

 

Thanks,

Aravind.

 

-Aravind

Hi Aravind,

 

 Thanks for your suggestion.

 

 For BYOD option, I will check but i need to know whether we can implement it without this option.

 

 Also want to know which certificate need to be implemented on end point devices ( Client Laptops) & ACS 

 

Try imported in the Certificate under certificate(local computer)->Personal->Computers in the client laptop.

Also add the root certificate & its intermediate certificate in the ACS under trusted certificate.

-Aravind

HI Arvind,

 

 We have tried the below steps however we are getting the below error.

 

12520 EAP-TLS failed SSL/TLS handshake because the client rejected the ACS
local-certificate

 

Pls suggest.

Create
Recognize Your Peers
Content for Community-Ad