IEEE 802.1x AP authentication on Catalyst 9800 WLC

[MayuranParanirupasingam3107]

What is the default IEEE 802.1x AP authentication configuration on a Cisco Catalyst 9800 Series Wireless Controller ?

[patoberli]

I think the default is disabled and don't use 802.1x on the LAN side.

[dal]

I think I need to wake up this thread.

There is this guide: 
https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/802-1x-support.html#id_79044

But it only shows how to set up PEAP as authentication method.

But I want to use EAP-TLS, and that is only partially explained.

And what I don't understand is, where to upload the necessary certificates, both to the AP and to the WLC

Anyone?

Thanks.

[Ric Beeching]

What are you trying to achieve here? Is it AP .1x authentication with the wired port or just .1x authentication with the WLC?

Either way you need to upload the certificates to the WLC which will act as a certificate enrollment proxy for the APs using SCEP.

Instructions are in this link to setup a new trustpoint on the WLC for this:

https://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/16-12/config-guide/b_wl_16_12_cg/locally-significant-certificates.htmlhttps://www.cisco.com/c/en/us/td/docs/wireless/controller/9800/config-guide/b_wl_16_10_cg/802-1x-support.html#id_7905...