cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
689
Views
0
Helpful
3
Replies

EAP-TLS and EAP-FAST

ney25
Level 2
Level 2

Hi NetPro.

EAP-TLS is working now, but how to configure EAP-FAST as the backup in case TLS is failure then user still able to use FAST as the second choice ?

your reply will be highly appreciated.

thanks heaps.

Jack

3 Replies 3

dancampb
Level 7
Level 7

All you really need to do is enabled EAP-FAST on the Radius server. If you are running a controller environment there isn't any changes on the controller needed. If you are running autonomous make sure you have both "authentication open..." and "authentication network-eap..." configured under the SSID. They only thing that would need to be changed would be the client. You could setup two profiles, one for TLS and the other for EAP-FAST.

Hi Dancampb.

Thanks for your information, currently i am using Cisco Appliance 1113 box. what is the requirement to setting up this EAP-TLS and EAP-FAST ? i have done the configuration with the necessary checks for EAP-FAST / TLS . but seems like only EAP-TLS working fine whereby EAP-FAST is failed.

your reply will be highly appreciated.

thanks.

jack

EAP FAST has two version v1 and v2. Which version you are using??

I suggest you to use EAP FST v1 as you already have a EAP TLS setup and it will be easy to manage that setup and more secure also.

Wht is the error you are getting while EAP FAST auth??? check "debug aaa events enable"

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: