WTI Knowledge Base • Authentication
Cisco ISE + Duo MFA + Windows AD Integration for WTI (RADIUS over DTLS)
Configure multi-factor authentication for WTI devices using Cisco ISE, Duo MFA, and Windows Active Directory. This guide covers Duo Push enrollment, the Duo Authentication Proxy, Cisco ISE policies, and WTI RADIUS settings. This version uses RADIUS over DTLS between the WTI device and Cisco ISE.
What this guide covers
- Windows Active Directory accounts and Duo Mobile enrollment.
- Duo Authentication Proxy configuration for primary authentication and Duo MFA.
- Cisco ISE identity sources, policy sets, and WTI authorization attributes.
- RADIUS over DTLS on UDP port 2083 between WTI and Cisco ISE, including certificate exchange and WTI secure settings.
Configuration guide
Open the PDF for step-by-step instructions, configuration examples, and screenshots.
View Configuration Guide (PDF)Use the IP addresses, account details, and settings appropriate for your environment when following the guide.