Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Attention: The Cisco Support Community site will be in read only mode on Dec14, 2017 from 12:01am PST to 11:30am for standard maintenance. Sorry for the inconvenience.

New Member

EAP-FAST

Hello everyone

I want to be able to ensure that all computers connecting to a specific SSID and are actually domain computers. Currently I have 802.1x machine authentication and EAP-FAST configured. EAP-FAST configuration under ACS has “Allow anonymous in-band PAC provisioning” and “Accept client on authenticated provisioning” under “Allow authenticated in-band PAC provisioning” checked off. Users currently get a PAC (self-signed off ACS)

Is there another way to verify domain assets besides a Certificate Services PKI?

173
Views
0
Helpful
0
Replies
CreatePlease to create content