Aruba Apps

last person joined: 11 days ago 

The HPE Aruba Networking Apps board is designed to address questions, comments, and feature requests for all HPE Aruba Networking mobile Apps
Back to discussions
Expand all | Collapse all

EAP-TLS for VIA

This thread has been viewed 4 times

  • 1.  EAP-TLS for VIA

    Posted Feb 22, 2013 03:28 PM

    Hello,


    We intend to put in place a EAP-TLS system for VIA authentication for our company and I would like to know what awaits us and pre-requisites. Is it easy to manage once installed? Do you have any suggestions?

     

    The use will be for Windows and iOS devices.

     

    Thank you!

     

    Alex



  • 2.  RE: EAP-TLS for VIA

    Posted Feb 22, 2013 03:43 PM

    The setup is covered in the VIA App Note on the VRD Site.   Refer to Chapter 5; specifically the section titled Configuring VPN Server for IKEv2; page 25.

     

    Considerations:

    - Do you have your PKI built

    - Do your controllers have certificates that will be trusted by the clients (same PKI or other is fine)

    - Certificates must be in the User store; not computer for Windows

    - The initial profile download for the client is done through username and password, not TLS

    - The controller cannot terminate PEAP for VIA authentications as it can for wirelss; your RADIUS server will need to do this