About efelipe_

efelipe_ · ‎10-18-2011

Ok, now itÇs working....it wasnÇt problem of switch configuration. The problem is in the supplicant, they canÇt validate certificated server, for the moment I solve the problem unvalidated server certifitate in the supplicant. Best regards, EF

efelipe_ · ‎10-18-2011

Yes I think IC-4500 is configured as RADIUS, because before I changed the IAS with IC and works fine (using MS-CHAP). But now I need use IC for linuxÇs user in LDAP....this is the reason to use EAP-TTLS with PAP. See the confugration attached. Thank you. EF

efelipe_ · ‎10-18-2011

Is it possible using EAP-TTLS with cisco L2 switches? I monitoring traffic betwen cisco SW and IC and I see nothing, before I have this configuration for IAS in SW and work well: interface FastEthernet0/1 description "USER" switchport mode access dot1x port-control auto spanning-tree portfast Regards, EF

efelipe_ · ‎10-17-2011

Im trying to configure ic-4500 as 802.1X RADIUS against OpenLDAP.Users have fedoraÇs supplicant. I think the best method of authentication protocols is EAP-TTLS with PAP. But IÇm not sure about the certificates requarements I need I think I only need to establish tunnel between supplicant and IC: - On IC 4500; server certificate and root CA certificate. - On suplicants; root CA certificate. Do you think that is correct? Is there a better way? Best regards, EF

Re: Authentication Protocols using openLDAP

Re: Authentication Protocols using openLDAP

Re: Authentication Protocols using openLDAP

Authentication Protocols using openLDAP