Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
361
Views
0
Helpful
2
Replies

Forcing clinet to have certificate in 802.1x

fisko
Level 1
Level 1

‎11-13-2009 02:54 AM - edited ‎03-09-2019 10:42 PM

Hi!

I have 802.1x with windows pki on wire with PEAP...i configure swithes to use MS IAS as radius... User from winxp authenticate regularwith user name and pass and user certificate.... Also same user can authenticate from linux machine even if the machine dont have certificate....

How to deny machines without certificates and in which point? I thing it would be IAS?

Labels:
0 Helpful
2 Replies 2

Faisal Sehbai
Level 7
Level 7

‎11-13-2009 07:36 AM

PEAP works with username/password combo and cert only on server side. If you want all machines to have certs, configure EAP-TLS.

Not sure how on IAS though.

HTH,

Faisal

0 Helpful

fisko
Level 1
Level 1
In response to Faisal Sehbai

‎11-16-2009 11:53 PM

TNX!

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents