WLC C9800 with EAP-TTLS/PAP

[andy.burns]

I have seen responses here that say the WLC2500 does not support EAP-TTLS, but am asking the same question in relation to the C9800 WLC.  I can't see any mention in the WEBUI under local EAP profiles or Advanced EAP

We're trialling Portnox Clear and it does not support EAP-MSCAHPv2 which is what we've used to date.

to be clear it is EAP-TTLS rather than EAP-TLS that's of interest...

[Scott Fella]

On any of the controllers, when you use 802..1x, then there is only one option in which you check 802.1x.  EAP-PEAP, EAP-TLS, etc. is all done on the radius server.  Maybe open a TAC case to get additional information.

[Rasika Nayanajith]

EAP-TTLS (Open Standard) & PEAP (Microsoft native support) are comparable. Many devices may require a supplicant to support EAP-TTLS where as PEAP (with MSCHAPv2) is natively supported most of Microsoft OS.

WLC point of view, it simply playing the middle man role and not actively do anything with EAP process (unless you make WLC local RADIUS). Therefore you should not face any issues from 9800 end. However client support on EAP-TTLS to be checked and see if you can use it natively

HTH
Rasika
*** Pls rate all useful responses ***