ISDN Dial-in with EAP-TLS

[itsec]

HI guys,

I have the following scenario:

client--ISDN--2651---ACS

the client should authenticate via EAP-TLS or EAP, preferred EAP-TLS. The certificate is established from a RSA Keon CA, the certificate is stored on a smartcard. I haven't find a way to configure EAP-TLs for dial-in user on 2600 (IOS 12.3(3)), isn't it possible? I configured the 2600 in EAP proxy mode to forward the requests via radius to an ACS, but cannot get it working also.

Hope, someone have configured that already and can help me out!

[davidensc]

vpn 802.1x auth for C2651XM (maybe also for dialer interface)

router model/IOS version-->

http://www.cisco.com/univercd/cc/td/doc/product/software/ios123/123newft/123limit/123x/123xa/gt_802_1.htm

802.1X Configuration

The following example shows that 802.1X authentication has been configured on a router:

Router# configure terminal

Router(config)# aaa new-model

Router(config)# aaa authentication dot1x default group radius

Router(config)# dot1x system-auth-control

Router(config)# interface xx #

Router(config-if)# dot1x port-control auto