WLAN authentication with ACS3.2...PEAP/EAP-TTLS

[oguarisco]

Hi,

I want to use 802.1X as authentication framework on both wired and wireless network...but use one Authentication method for both nets...

Does ACS3.2 support Cisco PEAP only with EAP-GTC or could I use all the EAP's flavour like MD5, MS-CHAPV2 ???

Is EAP-TTLS a proprietary method???

Is supported by ACS3.2 ??

Regards

Omar

[ED CARMODY · Accepted solution]

ACS 3.2 supports both EAP-GTC and EAP-MSCHAPv2; it can detect which a client is using and accomodate it.

EAP-TTLS is a draft standard, not supported by ACS.

[oguarisco]

Hi,

thanks for the useful answer,

Am I wrong if I said that also PEAP is still a draft standard ???

Does anybody knows when EAP-TTLS will be supported on ACS ???...since it would be more flexible than PEAP

Omar

[b.tay]

Suggest using PEAP with MS-CHAPv2.

Wireless

Radius : Cisco ACS 3.2

User Database : Windows DC/AD

Access Point : Cisco 1200 IOS Based

Wireless Supplicant : Cisco ACU PEAP Supplicant

802.1x - EAP-PEAP (MS-ChapV2)

Wired

Radius : Cisco ACS 3.2

User Database : Windows DC/AD

Switch : IOS Based

Wireless Supplicant : Cisco ACU PEAP Supplicant

802.1x - EAP-PEAP (MS-ChapV2)

Search for microsoft patches using the following keywords : wireless OR PEAP OR 802.1x OR WPA

Use lastest IOS from Cisco.