Flexconnect standalone mode EAP-FASTv2

[m.abdulmajeed]

Hi All,

I'm aware that the network access device is irrelevant to the EAP methods used as it encapsulated in RADIUS. We intend to deploy a wireless setup where APs in the branch should be able to authenticate users in the event of a WAN failure using the local ISE PSN. The APs are configured in flexconnect mode and in the normal operational scenario would be doing local switching, central authentication. In a WAN failure scenario the expectation is for it to perform local switching, local authentication in standalone mode. 

For authentication we intend to use EAP-FASTv2 with EAP-chaining. Would like to know if anyone has encountered any limitations in this type of configuration.

Thanks

Aadhil

[Shivu b]

Before implement check whether do you have certificate in ISE.

Please rate if this post helpful for you