Picture of Karl 2252
Registered 10 years 12 days
Karl 2252 Monday, 3 July 2017, 11:05 AM
EAP-TLS authentication with Windows Radius Server
I am curious if somebody has setup a working scenario ?
with
EAP-TLS authentication on the IP phones,
802.1x protocol on the Networkswitch and a Windows Radius server to authenticate.

Picture of Kevin 2055
Registered 10 years 130 days
Kevin 2055 Thursday, 9 September 2021, 02:55 PM
1 of 1 users consider this post helpful
Re: EAP-TLS authentication with Windows Radius Server
Hi Karl,

I know you had the problem a long time ago but since i just ran into it i can give you an answer now.

Unfortunately since Microsoft Server 2016 eap-tls won't work with innovaphone anymore:

Network Access Protection (NAP), Health Registration Authority (HRA), and Host Credential Authorization Protocol (HCAP) were deprecated in Windows Server 2012 R2, and are not available in Windows Server 2016. If you have a NAP deployment using operating systems earlier than Windows Server 2016, you cannot migrate your NAP deployment to Windows Server 2016.

https://docs.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-top

You need "NAP enforcement" to force the innovaphone Hardware to show its certificate.

best regards
kevin
Picture of Karl 2252
Registered 10 years 12 days
Karl 2252 Thursday, 16 September 2021, 09:50 AM
Re: EAP-TLS authentication with Windows Radius Server
Hi Kevin,

Thank you for your answer.

BR,
Karl
← You can define your color theme preference here