@boneyard wrote:
does anyone here have a token service (i.e. RSA, safeword) intergrated with their aruba controller for dot1x? how have you set it up? an alternative to username and password or an adition? does it require extra software on the client machine?
the RSA server has a built in radius server. You need to Terminate the 802.1x session on the Aruba controller and use EAP-GTC and enable token caching for the best results. Of course Windows devices will need to install a supplicant like the EAP-GTC shim. All other Operating Systems Support GTC out the box, however.