eap-fast problem

[xuanhuymai]

Hi all,

I use eap-fast on Cisco ACS to authenticate mobile carts. However, one a month I have to re-authorized those mobile carts. I seem like the mobile carts fail to authenticate in group every month; on some of them I have to re-authenticate every month; some works just fine. I have to select the PAC file on the client to re-authenticate. Any one have any idea how to config the eap-fast on ACS to let clients provison automatically? Thank in advantage.

[Tiago Antunes]

Hi,

As we are not sure of what version of ACS you are using, i will give you examples for ACS 4.x and 5.x.

ACS 4.x:

http://www.cisco.com/en/US/tech/tk722/tk720/technologies_configuration_example09186a00807bf3c8.shtml#enaeap.

ACS 5.x:

http://www.cisco.com/en/US/docs/net_mgmt/cisco_secure_access_control_system/5.2/user/guide/access_policies.html#wp1053293.

Choose the Allow in-band PAC provisioning field.             This field enables Automatic PAC Provisioning for properly-enabled EAP-FAST             clients.

HTH,

Tiago

--

If  this helps you and/or answers your question please mark the question as  "answered" and/or rate it, so other users can easily find it.

[xuanhuymai]

Tiago,

I use ACS ver 4.1 and I do have allow anonymous in-band PAC provisioning; allow authenticated in-band PAC provisioning checked. Do you have any idea where else do I have to look?

Thanks.

[Tiago Antunes]

Hi,

Youmay want to look into your PAC timers.

Please check the screenshot in attach.

HTH,
Tiago

--

If  this helps you and/or answers your question please mark the question as  "answered" and/or rate it, so other users can easily find it.