Lab Minutes Forum

Technical Discussion => Security => Topic started by: ansar471 on March 31, 2019, 01:08:22 AM

Title: EAP-FAST along with posture
Post by: ansar471 on March 31, 2019, 01:08:22 AM

Dears,

I am trying to authenticate my domain PC's/users with ISE and am using Anyconnect 4.2 with eap-fast user and machine authentication.

Everything was working with window 7 until i re-image two nodes from 1.4 to 2.2 and restore ISE configs. I have window 7 which is in process to upgrade to window 10.

ISSUE:
1. After signing out window 10 machine authentication is happening and getting right result but after sign in with domain user posture is not working after looping its saying no policy server found. For it to work i have to click on NAM profile once more to re authenticate and in that case its starting its posture check.

2. Some machines are not even authenticating even i did restart, sign out. No session is showing on switch-port.
3. Some machine on authentication getting IPV6 logo only because we are not using IPv6 in the environment.

Title: Re: EAP-FAST along with posture
Post by: MC on April 02, 2019, 09:29:34 PM

If you switch to native supplicant, does everything work the way it should?

Title: Re: EAP-FAST along with posture
Post by: crismonilla on April 29, 2019, 11:33:12 PM

what is you switch model and version? please share your policy in ISE