Configure EAP-TTLS

Introduction

This document describes how to set up Windows Group Policy to allow domain machines to automatically perform 802.1x EAP-TTLS authentication against RADIUS NAC.

Create RADIUS Clients

1. Log into the MetaDefender IT Access console as an administrator
2. Navigate to RADIUS NAC
3. Click on Edge Type
4. Click on RADIUS Clients tab
5. Click Add RADIUS Clients button
   • Provide a name for the Radius Client
   • Select a specific Vendor
   • Enter a Secret key
   • Click on Add

CIDR Ranges could also be input as:

Integrate with AD/LDAP

To configure an Authentication Source click here

Enable EAP-TTLS Authentication

1. Log into the MetaDefender IT Access console as an administrator
2. Navigate to RADIUS NAC
3. Click on the item with Edge type
4. Click on Authentication Methods tab
5. Click on Enable Authentication Methods toggle button

5. Select EAP-TTLS
6. Click on Add button and select an LDAP connection

7. One or multiple connection can be selected

8. Click on Save button

Appy the configuration

Click on Apply button to publish the configuration