Domain logon with EAP authentication

[Yossi.Mor]

Hello forum,

I have configured wireless client to perform EAP/TLS authentication via AP 1200 to Cisco ACS and that's works fine.

My question is how the process described above can be performed before log on to the domain so i can get an ip address and then logon to the domain?

Thanks

[pradeepde]

Before authenticating with the ACS, the switch port is blocked, so, It does not matter if you use a local user (registered in the PC) or a valid user in the domain (registered in the Domain Controller), the only way the Authentication pop up window for the ACS appears is to have access locally to the PC. You cannot have access to the PC through the domain user and password because you cannot reach the Domain Controller and because you have not authenticated with the ACS yet and the switch port is blocked.