802.1x EAP-TLS with Cisco ACS 5.2 on 2910al

[gunte]

If anyone has done this before please let me know how you made it happen.

I keep getting, can't reach Radius server and EAP session timeout in the switch and ACS logs.

Mac based auth works fine so does device management. I am starting to wonder if this is supported by the switch.

Any help would be very appreciated

[ISoliman]

EAP-TLS uses certificate to authenticate both client and server, what configuration you have done on the client? Did you create a certificate for it ? are you able to ping the ACS from the 2910 ? get the config output from the switch along with "show auth" "show radius" plz

[dharden26]

I don't mean to hijack a thread, but I am trying to configure dot1x authentication for various HP printers and have a question about the certificate.  Do I need to have one created from our internal network, or can I have one created by a third party?  We do not have an internal CA infrastructure, we usually get our certificates from Veritas or GoDaddy.  Thanks.