Which supplicant(s) and server(s) are capable of supporting EAP-CHAINING?
Which supplicant(s) and server(s) are capable of supporting EAP-CHAINING?
Cisco AnyConnect NAM (Network Access Manager) and Cisco Identity Services Engine (ISE) are capable of supporting EAP-CHAINING. EAP-CHAINING is a method used to validate both user and machine credentials during the authentication process, and Cisco AnyConnect NAM supports this function alongside Cisco ISE.
B & D are both correct I think: "Previously, to achieve this you needed the Cisco AnyConnect NAM module and use EAP-FAST on the windows supplicant as the native Windows supplicant did not support this. Now, you can use the Windows Native Supplicant to perform EAP Chaining with ISE 2.7 with the use of TEAP." https://www.cisco.com/c/en/us/support/docs/security/identity-services-engine/216510-eap-chaining-with-teap.html
b is correct
B is correct- uses EAP-Fast. Windows supplicant does not support EAP-FAST. ACS is EOL & used for TACACS+ if still being used
B is correct
Eap-channing (EAP-Fast) is a propietary protocol of CISCO , and that is why Cisco AnyConnect supplicant and cisco ISE can support eap-channing protocol
TEAP (enabling chaining via the windows native supplicant) is supported 2.7++ so this must be a very old question...