Security

This is a client setting. You cannot force it from the radius server side unless you have control over the client via group policy, MDM, etc.

Sent from Nine

Assuming that your clients are, in the majority, Windows clients, then you can enforce this in their Windows domain user profile. For iOS I think that anything after Mac iOS 7 actually forces the trust chain to be checked by default. I have had a customer case with iOS 8, the CA was corporate and not checked by default by iOS, hence authentication failed.

Either way, these are client settings and not really enforceable from the network side.

I've moved this topic to the AAA, NAC, Guest Acces & BYOD board, as it was clearly not in Spanish :)

 

Merry Christmas!

thank you! 

in another way , can i limited to only  join the domain computer can access the wireless networks no use machine authentication?

Machine authentication is the method you use to limit to only domain machines.

Sent from Nine

is there another way to  accomplish exclude machine authentication ?

You can issue certs to the devices. Why don't you want to use machine authentication?

Sent from Nine

Using certificates to device too complex，machine authentication  is not easy to management。it seems only use machine authentication

 

thanks

 

 

Machine authentication is very easy via group policy.

Sent from Nine