Per SSID EAP-type Authentication

[rsumpter]

Is there away to configure ACS 4.2 to only allow certain EAP-type of authentication per SSID? For example: SSIDA - only allows EAP-TLS and SSIDB - only allows EAP-PEAP on the same ACS server?

Any help is greatly appreciated.

Sent from Cisco Technical Support iPad App

[Nicolas Darchis]

You should configure a NAP (Network Access Policy). The selection factor should be "per SSID" and then for each policy you can allow different eap types.

for the "per SSID" part, the WLC has a command to change the called-station-id to append the SSID name to the ap mac address