Multiple EAP types mapped on to the single SSID

[Muhammed Adnan]

Hello Experts, 

I could see that there's an option to map multiple EAP types on an EAP profile, which eventually gets assigned to a WLAN. 

What will be the order or precedence in which the client will then attempt the EAP-Types to try authentication?

[Ric Beeching]

Hi,

These local profile will only apply if you are using the WLC as the Authentication Server (AS). Generally people use external servers such as Microsoft AD/NPS, Cisco ISE or Cisco ACS etc and the EAP type is determined there along with authentication.

However, if you are using local auth with these profiles, then I believe the client can choose to use any type of auth in that list and there is no hierarchy, the same as if you were using these profiles on your external server. In corporate environments this is often managed through profiles on the client e.g using a group policy in windows to push out a "EAP-TLS" only profile etc.

Ric