Wireless Access

Reply
Occasional Contributor I

Two Factor Authentication with Aruba Wireless

We've got a wireless network of multiple Aruba wireless controllers and access points. At the moment, we're investigating deploying two factor authentication, with the two factors being: Domain Username/Password and a Certificate.

 

Is the only way to do two factor authentication like this with EAP-Chaining?

 

Will EAP-Chaining work on Android and Apple IOS devices? 

 

We would normally be able to use machine authentication for something like this but we are wanting two factor authentication for devices that aren't in AD. 

Guru Elite

Re: Two Factor Authentication with Aruba Wireless

The controller is EAP agnostic. The answer would depend on what you're using
for your RADIUS server.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Occasional Contributor I

Re: Two Factor Authentication with Aruba Wireless

We're going to be using Cisco ISE. Aruba has functionality to enable a machine authentication option, I had hoped that it would also have some kind of functionality to check for certs or something. 

Guru Elite

Re: Two Factor Authentication with Aruba Wireless

If you're using ISE, you could leverage ISE for all policy decisions. You
shouldn't mix controller authentication functions and RADIUS server
authentication functions.

Tim Cappalli | Aruba Security TME
@timcappalli | timcappalli.me | ACMX #367 / ACCX #480
Search Airheads
cancel
Showing results for 
Search instead for 
Did you mean: