Monday, April 12, 2021

Cisco ISE 802.1X

Hi, guys.

I'm having a hard time wrapping my brain around EAP-Chaining.

What is the real world benefit of using EAP-Chaining? (either by using EAP-FAST or EAP-TEAP). Why wouldn't I just issue machine/user certificate and use EAP-TLS? I can just add an authorization policy with multiple conditions:

  • User logged off - allow bare minimum access
  • User logged in - allow full access.

My understanding is that even with EAP-TEAP, I still need to issue machine and user certificates right?

Thanks in advance.



No comments:

Post a Comment