Zebra Symbol Devices on 802.1x

[robbyde0100]

Hello,

I've setup a SSID that WPA2 with AES along with MAC filtering on ISE to enable our symbol zebra devices to connect to the network but I'd like to make sure of 802.1x machine based authentication so I can make use of Cisco Centralized Key Management which is available on the RF guns (plus being more secure).  

I'm struggling to work out how to authenticate the RF guns against ISE without using user authentication (the guns need to connect then they will auto launch the Telnet session).  I can generate a certificate for the RF gun and install it but what are the recommended settings should I use??  Or does someone have a guide or video explaining the setup?

Thanks

[Flavio Miranda]

Hi @robbyde0100

 This video or any other from LabMinutes might help you. 

https://www.youtube.com/watch?v=OCqLRzuqCW8

-If I helped you somehow, please, rate it as useful.-

[robbyde0100]

Thanks for that, its helpful but presuming the device is in AD which the RF guns are not.

[Flavio Miranda]

Alright, this series is made by a very good guy. There are tons of excellent videos. 

-If I helped you somehow, please, rate it as useful.-

[robbyde0100]

Would profilling be a better solution for this?  Rather than using certificates, allow the guns via a profile?

[Flavio Miranda]

Certificate is always a very secure solution. But, it is a bit complex and you can end up with expired certificates some day. 

 I´d try something more simple to start.

-If I helped you somehow, please, rate it as useful.-

[robbyde0100]

Maybe I should be asking, can I install a machine certificate on a RF gun?

[Flavio Miranda]

In fact you can, as you can see below. Of course, I am considering the vendor and not your model.

https://www.zebra.com/us/en/support-downloads/knowledge-articles/installing-user-certificate-via-activesync-for-eap-tls-authentication.html

-If I helped you somehow, please, rate it as useful.-