ACS EAP-TLS

Question

Hello Experts...
i have a problem when using ACS 5.1 with AP1141 through EAP-TLS authentication method.
when i try to connect my laptop , it's authenticated sucessfully , but when i try to authenticate third party Black Box using EAP-TLS , i have an authentication failure ( 12511 Unexpectedly received TLS alert message; treating as a rejection by the client ).
when i check the debug report at the ACS , i found that the authentication method when i use my laptop is x509_PKI  , and it's successfully , but when i use the 3rd party devise , the authentication method in the radius log report is EAP-TLS , and it's failed.
so is there any different between the x509_PKI  and EAP-TLS , if yes , how could i check EAP-TLS.
reyad

Answer 1

hello,,,
i do confirm that , the 3rd Party already trust the AAA CA , and the AAA trust the 3rd Party CA.
when i use Cisco 4.1 Radius , the client is connected without any problem.
to clarify the status , this client accept only eap-tls authentication method ,so the only changes which i did on the 4.1 radius , is go to system configuration , global authentication setup , and enable the eap-tls only...and change the AP EAP request timeout to 0
and this what i did also in ACS5.1
any suggestions
reyad