802.1X Wirelless user Authentication Process

Hi, I would like to ask about on what is the best way/practice to use 'Wireless 802.1x' authentication. I maybe asking the wrong question but please feel free to correct me.
Two things:
1) I have configured vWLC with Tacacs AuthC, Authz, and Accounting. Im ok with this so far.
2) If ever I am going to authenticate user using 802.1x in a  WLC, what would be the process path looks like? Should it be like:

User -  AP - ISE - AD/NPS  (do we need NPS?)
User - AP - AD/NPS (SHould the user directly authenticated via NPS and bypassing ISE?)Topo
A BallesterosAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Jakob DigranesSenior advisorCommented:

do you have ISE deployed? if so - use ISE as Radius. ISE will probably verify user accounts from AD.
Which kind of authentication do you use? username and passwords (EAP-MsChapV2) or certificates (EAP-TLS) ?
You also need a certificate for verification of Radius server and possibly establishing the PEAP session

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
A BallesterosAuthor Commented:
Thanks Jakob. That's just what I wanted to verify if I can use ISE to AuthC wireless Users. I have ISE setup, AD, (EAP-MsChapV2) ... I just also found out about this "Wireless express setup" ( i believe available in ISE 2.3 / 2.4) I am now onto it.. .
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today

From novice to tech pro — start learning today.