Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

PEAP migration from LEAP

We currently support LEAP. I have successfully tested and configured PEAP on a test client using the same access point. The problem I discovered is that if a client is still configured with LEAP that it continues to authenticate. We would like a PEAP only environment. Is there a way in the 1200 AP or ACS(3.3.3) to disable LEAP while still supporting PEAP?

3 REPLIES
Silver

Re: PEAP migration from LEAP

Hi Michael,

in ACS navigate to:

System Configuration -> Global Authentication Setup -> untick the "Allow LEAP" checkbox.

This should prevent the clients from authentication with LEAP over the APs.

Best regards,

Frank

New Member

Re: PEAP migration from LEAP

The problem is we are going to migrate 20 different sites and during the migration the ACS needs to continue to support LEAP. Any way to do this?

Silver

Re: PEAP migration from LEAP

Hi Michael,

i have overseen the main point here.

;-)

I assume you have for PEAP a different SSID and therefore a different VLAN. Turn off the VLAN for LEAP authentication on the sites you have migrated. And the clients should not be able to login.

Best regards,

Frank

142
Views
0
Helpful
3
Replies