A. EAP-Chaining is supported on the Windows 802.1x supplicant.

B. EAP-FAST does not allow to bind multiple authentication and this limitation is used for mutual authentication in EAP-Chaining.

C. Allow user and machine authentication with one RADIUS/EAP session.

D. EAP-FAST's PAC provisioning phase is responsible to establish SSH tunnel between supplicant and ISE to perform EAP-Chaining.

E. EAP-Chaining is enabled on AnyConnect NAM automatically when EAP-FAST user and machine authentication is enabled.

F. EAP-Chaining can only use EAP-FAST, and requires the use of AnyConnect NAM

G. EAP-Chaining is enabled on NAM automatically when EAP-TLS user and machine authentication is enabled.