Using TLS Certificate fields for authentication mapping

[StephanH]

Hello,

can I use TLS certificate fields like "TLS-Cert-Issuer" or "TLS-Cert-Common-Name" (or other fields mentioned here: https://extremeportal.force.com/ExtrArticleDetail?an=000064090) to do the authentication mapping in the NAC AAA configuration to e. g. switch between local authentication or proxy radius if I use 802.1x?

If yes, how can I do set? What do I have to enter in the fields (User/MAC/Host)?

Best regards
Stephan

[Zdeněk_Pala]

Yes you can use wildcard to check the username. Username is the CN.

[StephanH]

Thank you Pala,

can I use only parts of the certificate CN, too? Like "host/*" in an user name.

Best regards
Stephan

[StephanH]

Hello Shumlik,

I want to make a decision if to proxy or do a locally auth.

Best regards
Stephan

[Shmulik]

Stephan, are you looking to use a cert field for making a decision if to proxy the request to another server or auth locally? or are you looking to perform the auth by ExtremeControl server but use a cert field to make an authorization decision as what network service to assign?