Authentication Support / Configuring EAP-FAST Authentication |
If you use manual PAC provisioning, you must avoid allowing the PAC file to expire.
When you create a PAC file on the Cisco ACS, it has an expiration date determined by the Tunnel PAC TTL property. The best practice is to set the Tunnel PAC TTL property to 5 years or more so that you do not have to replace the file frequently. If you choose to set Tunnel PAC TTL to a shorter duration (for example, 1 year), ensure that you replace the PAC file on the Vocera Voice Server before it expires.
If you use automatic PAC provisioning, replacing a PAC file on the Vocera Voice Server is not required. The PAC is automatically provisioned by the ACS.