10-23-2017 08:26 AM
Hi, is it possible to allow just windows machines to connect using MSCHAPv2 ? I am trying to move away from mschapv2 but in the meantime it would be good to only allow certain OS so connect. Is it possible if i have profiler enabled?
Solved! Go to Solution.
11-04-2017 11:27 AM
802.1x would require authentication before the client gets an ip address. The client would need an ip address to determine the client type. that means that the device would first need to get on your network to be provide and kicked off, after.
What you might want to do is configure your Windows devices for machine-only authentication on the wireless supplicant and then only allow devices in the domain computers group to authenticate in ClearPass.
Answers and views expressed by me on this forum are my own and not necessarily the position of Aruba Networks or Hewlett Packard Enterprise.