Do you use PEAP w/ server validation on 792X phones?
I'm just wondering if anyone else uses PEAP with server validation on 7921 and 7925 phones.
If you do what kinds of problems or administrative issues have you faced?
Currently we use this method but we are looking at either getting rid of the server validation or reconfiguring each and every phone to trust a private CA that we own. (We would also obviously install a cert signed by that CA onto the ACS server doing the RADIUS for the phones).
Right now the cert that is on the ACS servers is signed by GoDaddy. The phones all have the intermediate cert bundle and the root cert on them. This works just fine. However in my research I've found that the intermediate certificates might be changed out randomly at a whim, so when we go to renew this certificate with GoDaddy it could be possible none of the phones will trust the ACS server anymore.
So what does everyone think about this?
Is it a good idea to change the type of cert we are using to the private CA?
Would it be better to just give up on using server validation?
Or am I just being paranoid about GoDaddy changing out their intermediate certs?
I just looked at their public key store page and the same ones are still used and are valid that they used about a year ago to sign the cert we bought from them.
BenefitsDocumentationPrerequisiteImage Download LinksLimitationsSupported PlatformsLicense RequirementsTopologyStep-By-Step ConfigurationConfigure Virtual ServiceActivate the virtual service and configure guest IPsConfiguring UTD (Service Plane)Configurin...
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...