Hi All,
I'm aware that the network access device is irrelevant to the EAP methods used as it encapsulated in RADIUS. We intend to deploy a wireless setup where APs in the branch should be able to authenticate users in the event of a WAN failure using the local ISE PSN. The APs are configured in flexconnect mode and in the normal operational scenario would be doing local switching, central authentication. In a WAN failure scenario the expectation is for it to perform local switching, local authentication in standalone mode.
For authentication we intend to use EAP-FASTv2 with EAP-chaining. Would like to know if anyone has encountered any limitations in this type of configuration.
Thanks
Aadhil
