Which EAP Method to Use?

Hi.
We are looking to implement 802.1x on our Wireless Network.  I need to support Windows XP and above, Apple Macs (maybe iPhones, etc) and some Linux.
I would have liked to have used PEAP with EAP-MSCHAPv2, however I am stuck with ACS 4.2 backended into LDAP (Oracle IDM) and this won't support MSCHAPv2.
We don't really want to spend anything on supplicants, so I'd like to know what method would be best for the spread of clients we have to support.
Thanks
Matthew

Matthew:
I think you knew the answer, that is why you mentioned that you don't wana spend anything on the client side
Unfortunately, you will need to use EAP-GTC (Generic Token Card) method in order to work with LDAP integrated withradius server.
Cisco PEAP uses EAP-GTC although this only works in wireless environment and Microsoft PEAP uses EAP-MSCHAPv2.
Acs supports both the methods so only option here is to use GTC supplicant on the client side.
In order to enable EAP-GTC, you can use either one of them:
Cisco350card
Cisco ACU utility
HTH
Regards,
JK
Plz rate helpful posts-

Similar Messages

  • Which extraction methods are used for extracting AR , AP, GL , cost centre

    which extraction methods are used for extracting AR , AP, GL, cost centre  account   data from R/3 system.
    please let me know what type of extraction we use...generic or FISL.... OR COPA
    ON WHAT SCENARIOS WE USE  THIS EXTRACTIONS..
    if any have documents on it please  email...please  send  an  email    documents ..
    to  [email protected]  
    iam bit confused with sap help...
    will reward full points
    please reply

    Hi,
    For general ledger :
    http://help.sap.com/saphelp_nw70/helpdata/en/57/dd153c4eb5d82ce10000000a114084/frameset.htm
    This is the best how-to guide on AP,AR,GL and TAX.
    http://help.sap.com/saphelp_nw04/helpdata/en/af/16533bbb15b762e10000000a114084/frameset.htm
    Hope it helps.
    Regards,
    Srikanth.

  • CS3 - Cropping tool: Which reduction method is used?

    When I use the Cropping Tool to crop and reduce a large image to, say 400 x 300, which "reduction method" does the tool use?
    In "Image Size", it gives options for Bicubic, Bicubic Sharper, etc etc
    Is there a place to set the method for the Cropping Tool?
    Thanks

    Thanks.
    Okay, I've got it:
    There is a setting in Prefs which controls the method, but in the "Image..." command, you get a chance to temporarily override the Prefs.
    Setting the method "Image..." does NOT change the default method set in Prefs.
    Cheers.

  • Which update method to use???

    Hi all,
    Our client has an average of 1000 sales orders per day.
    Which update method will be the best for such a scenario and why?
    Please suggest.
    Cheers
    Jayashree

    Obviously Delta Update.
    Whenever you have a regular postings in the source system, it is always advised to go for Delta update instead of Full update.
    If you go for Full update, day-by-day the number of records will increase and yr data load performance will be badly affected.
    In case of Delta, only the changes will be captured and load perofrmance will be consistent.
    Regards,
    Balaji V

  • Which http method to use- get or post???

    hi all.........
    i m trying 2 proceed URLs using httpclient with GetMethod & PostMethod. But i m confuse about that at which time which method i hav 2 use- getor post??
    The whole implementation of my code is done using j2se.
    It's so important part of my project. So plz help me...

    Random question to ask in these forums, you can do a simple google seach to find the difference between Get and Post.
    Basically Get will parse information at the end of your address, such data will be made public to see.
    e.g. www.mel.com?name=mel
    Post on the other hand stores the data inside the body of the html document, upon more things.
    Mel

  • Which password method to use?

    I don't know which AX I have. It is dated 2005, and was given to me. Do I choose WEP, WPA, WPA2, etc.?

    the most secure would be WPA2, however, early versions of the AX may not support that.
    click here to *identify your airport hardware* and find out.
    JGG

  • Which method is used for event creation

    Dear All,
    My client has more then one Purchase Organization. Workflow for Purchase order release very from pur org to pur org. For example - workflow WS92000030 is trigger when PO is created for India pur org where as workflow WS92000021 is trigger when PO is created for US pur org.  
    I checked and found that same Object Type - BUS2012 & event - RELEASESTEPCREATED is used in all Pur. Org PO release workflow. Also I found in Transaction code - SWETYP that Type linkage activate for  BUS2012, RELEASESTEPCREATED in all the PO workflow - WS92000030 & WS92000021.
    As per my knowledge, event can be created in various way such as Function module, Change document, General status management, Business Transaction Events etc.
    Can some one guide me, how can I found that which method is used for event creation in different pur org?
    How can I fould what is the fuctional module used for event creation if Fuctional module used for event creation. 
    For your information, I can see in T. Code - SWUO that 'Result dependent on a check function module'  for all the workflow - WS92000030, WS92000021 etc.
    Thanks in

    Hi Sahu,
    I dont think they have used the Function module or change document or any other kind of methods to trigger the workflow. This is because RELEASESTEPCREATED method is a standard method and it will be triggered by standard SAP. They can not make changes in standard sap saying RELEASESTEPCREATED should be triggered for this Purchase Org .
    Istead what i think is, they might have given the Event Condition for each workflow.
    In SWDD>> basic settings>> Start Events, we can give condition on triggering the workflow.
    Please check this.
    Regards,
    Gautham

  • Which String method would be used to...

    Which string method (maybe it's not even a string method) would be used to change user input for example from:
    User input: Brandon Bell
    Changed to Bell, Brandon
    Thanks.
    Brandon Bell

    Which string method (maybe it's not even a string
    method) would be used to change user input for
    example from:
    User input: Brandon Bell
    Changed to Bell, Brandon
    Your question is very vague. What are the exact requirements? Are you assuming that the inputted string is a first name and a last name, separated by a space, and you want to change it to last name comma first name?
    If so, the methods indexOf and substring will be enough for a first, naive implementation. With that in place you might want to ask yourself:
    Will you allow the first name to have one or more spaces? Will you allow the last name to have one or more spaces? Etc, etc.

  • WIFI WPA-EAP won't connect as EAP method only shows SIM, how can I make it show more?

    Trying to connect to a wifi connection which uses WPA-EAP security, with a username and password system (at work and I cannot change these settings).
    My Android device connects with no issues, but my ZTE open C on Firefox OS will not...
    Looking into my Android settings it is using EAP method PEAP; but the FFOS will only let me use SIM.
    What is the workaround for this?
    How can I connect my device to my work's wifi?

    GAUTAM24, if you read the earlier reply you would see a relevant bug has already been filed.

  • [ISE] EAP-chaining by using EAP-TLS internal authc for machine cert & user cert

    Hi Guys,
    I'm taking the EAP-chaining into our enterprise workspace authenticaiton, now i meet following issue:
    my anyconnect make the network xml profile which decide the method of  eap-fast authencation ,both  the machine authc & user authc are use the cert.
    Then i found that the client always knock the authoraztion policy about the machine authenticaiton(i set this policy result which is permit access), i believe the " EAP-fast result machine & user are passed " , even though its result using the dacl "permit all", but it doesn't knock the following policy.
    and about the result of  machine authentication , i set the "permit access" , is it too loose? but i check the instance and cisco document , everyone told me that this policy rusult " permit access".
    it would be appreciated that anyone can help this issue.
    lately i will upload my policy and live authencation pic catch. Thanks.

    http://www.cisco.com/c/dam/en/us/solutions/collateral/enterprise/design-zone-security/howto_80_eapchaining_deployment.pdf
    Just change the authentication policy to allow the methods you want to use under eap-fast (eap-chaining) and use the same ones in your nam client configuration settings.

  • Which EAP Type to choose for 802.1x Wireless Policy?

    Hi everyone,
    i have a question about recommendation for EAP Type in a wireless policy:
    Which configuration is more secure/recommendet?
    a)
    Authentication Type: PEAP
    EAP Type: EAP-MSCHAP v2
    b)
    Authentication Type: EAP
    EAP Type: Certificate
    We have a working configuration with a) and could Change to b).
    Thanks,
    Andy

    Hi,
    Project a uses PEAP cooperate with EAP(EAP-MSCHAP v2) is more security/recommended.
    PEAP is a new member of the family of EAP protocols. To enhance both the EAP protocols and network security, PEAP provides:
    1. Protection for the EAP method negotiation that occurs between client and server through a TLS channel. This helps prevent an attacker from injecting packets between the client and the network access server (NAS) to cause the negotiation of a less secure
    EAP method. The encrypted TLS channel also helps prevent denial of service attacks against the IAS server.
    2. Support for the fragmentation and reassembly of messages, allowing the use of EAP types that do not provide this.
    3. Wireless clients with the ability to authenticate the IAS or RADIUS server. Because the server also authenticates the client, mutual authentication occurs.
    4. Protection against the deployment of an unauthorized wireless access point (WAP) when the EAP client authenticates the certificate provided by the IAS server. In addition, the TLS master secret created by the PEAP authenticator and client is not shared
    with the access point. Because of this, the access point cannot decrypt the messages protected by PEAP.
    5. PEAP fast reconnect, which reduces the delay in time between an authentication request by a client and the response by the IAS or RADIUS server, and allows wireless clients to move between access points without repeated requests for authentication.
    This reduces resource requirements for both client and server.
    You can choose between two EAP types for use with PEAP: EAP-MS-CHAPv2 or EAP-TLS. EAP-MS-CHAPv2 uses credentials (user name and password) for user authentication. EAP-TLS uses either certificates installed in the client computer certificate store or a smart
    card for user and client computer authentication. Comparatively, the second one is more security because public Key certificates provide a much stronger authentication method than those that use password-based credentials.
    Best Regards,           
    Eve Wang 

  • How can i pass array as argument in magento api method calling using sudzc API in iphone Native APP

    0down votefavorite
    I am implementing magento standard api method in native iphone app. I use webservice generated by sudzc. To call method I use:
    [service call:self action:@selector(callHandler:) sessionId:@" " resourcePath:@" " args:@""];
    When I used methods e.g. cart.info or product.info in which I have to pass one parameter; it gives valid response. But when I used method e.g. cart_product.add in which I have to pass an argument as value of array it gives error
    SQLSTATE[42000]: Syntax error or access violation:
        1064 You have an error in your SQL syntax;
        check the manual that corresponds to your MySQL server version for the right syntax to use near ')' at line 1
    I have tested in SOAP UI also. There also it gives me same error. But same method works in PHP file. Even I tried by creating same soap request which I created using JavaScript but still it doesn't work.
    Can anyone help me to pass array as a parameter using sudzc api to call magento web services?

    There is an error in your SQL.

  • How to find out which queries are being used ?

    We have a number of InfoSet Queries which the users are calling from SQ00. Some of them are very old.
    I would like to find out which queries are being used, so we can have the idle queries decommissioned.
    How can this be done ?
    Best regards,
    Peter

    Hi,
    It's been a while since I've done this but one method is to use ST03N & look for the execution of programs with an AQ* prefix.  The general structure is AQZZ/<query user group><query name>.
    You could probably get the same info from the audit log but I've not checked that.
    Cheers,

  • Which one better to use - jsp:useBean or import statement

    Hi,
    I just want to know that which one is better to use jsp:useBean or import statement .
    I can instantiate and call method of myclass -
    1) by importing the class through import tag in jsp as <%@page import="myclass"%. or
    2). by using <jsp:useBean tag....
    i have these two option to do the same thing. i know that basically useBean is used to call setter and getter method of bean class and but it can be used to call a normal java file that have some logic .
    so what should i used , which one is better and why?
    useBean provides scope and object instance so no need to create object by new operator. and with import you have to create an instance .
    but which tag should i use in my jsp?
    i am confused???

    ok, means i can use jsp:useBean tag for all my
    classes that are not actually bean. so it will be
    instantiated at run time and provide efficiency .No. Jsp:useBean is used for java bean components.
    >
    but when should i use import statement in my jsp and
    it happen at translation time so will it create any
    type of burden for my code if i import multiple
    classes.For non-java beans, you need to import the classes, period.
    It's not a burden, it's a necessity.

  • How to delete standard payment method in use

    I am trying to delete some of the standard payment methods from table "V_T042ZL" but wont able to do as its giving error  "The payment method still used by some of the company codes."Now i found its used by some of the company codes.So please let me know where its assigned with company codes which needs to be deleted to delete standard payment method.

    hi
    payment methods which are already  existed, if u wanted to use u can use or you can create by going to new entries
    payment mehtod is defined with single digit code, the same payment mehod is defaulted with a feataure called ZLSCH
    so the payment method is  defaulted in 0009 info type
    that is enough
    in real time scenario, we will create our company code , so there is no such problem
    company codes are defined by fi/co

Maybe you are looking for

  • Auto Inserting tags in Design View

    Hi, I keep running into a problem that is bugging the crap out of me and I was hoping the Dreamweaver community could help me solve it. Whenever I am in Design View, and I add, say a table, then type some text inside any of the cells, there is a open

  • How do I update my contacts on my MacBook pro from my iPhone or iMac?

    my contacts on my MacBook pro are out of date. How do I update them from my iPhone or Imac?

  • CDROM/DVD not working with kernel 2.6.15

    I just upgraded to 2.6.15 kernel, unfortunately my  CDROM/DVD drive no longer works. It did well with the 2.6.12 kernel series. I provide the attached data for you: [root@dragonheart leviathan]# lshwd 00:00.0 Host bridge: Intel Corp.|875 DRAM Control

  • Conditions with 0 value in pricing appears in Price of sls order in ECC 6.0

    Hi All, We have upgraded from R/3 4.7 to ECC 6.0.We have a pricing procedure with Condition type VPRS for which the value comes from the valuation segment of the Material master. It is a statistical condition. In R/3 4.7, if we used a non valuated ma

  • List of songs missing, playback unaffected.

    Hey folks, just bought a new mac, moved all my music over, and things worked fine yesterday. Today, itunes is empty. Upon opening, the portion of the window that ought to have the song list is blank. If the itunes store is opened, things appear norma