[FortiNAC] - EAP TEAP migration from Cisco ISE to FortiNAC

[vasilisgogos]

Hello,

I need some help with EAP chaining with TEAP for SSID configuration.

To my knowledge, Wifi Certification with machine Certification is doable, but how to integrate LDAP authentication of users to that?

At the moment, the authentication is passing through Cisco ISE, and it is checking both machine certification and the username/pass of the user. 

Is there any way to combine them to FortiNAC-F 7.6 or 7.4 ?

Thank you in advance. 

[ebilcari]

FNAC added support for EAP-TEAP in firmware branch 7.6 (What's New in FortiNAC F 7.6). 

[vasilisgogos]

Hi Emirjon,

I couldn't find any example describing the above implementation.

I know that TEAP is supported on 7.6 , but how to combine the machine certificate with user/pass ?

Vasilis

[ebilcari]

Actually the section of TEAP configuration seems not published yet in the Admin guide. I will ask internally to update it. Configuring the RADIUS local server in FNAC should be straight forward, most of the configuration is done in the supplicant on the end hosts. For user/pass authentication to succeed, Winbind need to be configured.