Meraki - MR - RADIUS 2.0

[RaphaelL]

Hi ,

There is 2 documents that I would like to get some clarification about : 

https://documentation.meraki.com/MR/Access_Control/MR_Meraki_RADIUS_2.0

Section Called Station ID is missing 2 attributes :

AP LAN IP

AP Public IP 

NAS ID 

Should reflect the warning present on the dashboard about 802.11r. Some attributes are not available if 802.11r is enabled  :

Device IP set as NAS-ID

I'm currently running a MR36 with MR30.7 firmware and I do have the attributes AP LAN IP and AP Public IP . 

Unsure if the notice is correct : 

With MR31.1 the NAS-ID value can be set as the AP’s Public or LAN IPv4 address. 

https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_RADIUS_Authentication_...

I'm not sure this is correct. Taking a packet capture of an auth request with a SSID configured with "My Radius server" shows a Called-Station-ID of : NODE_MAC:SSID and not the BSSID:SSID

Cheers , 

[FeliA]

Good day @RaphaelL,

The feedback is greatly appreciated!

You are correct, those three points require correction in the MR Meraki RADIUS 2.0 article.
I will let you know once those updates have been completed.

And for the second article, Configuring RADIUS Authentication with WPA2-Enterprise, this information has been forwarded to the appropriate team for review. Once the investigations are complete, the article will be updated accordingly.

Thank you!

Best,

Feli

[FeliA · Accepted solution]

Hi @RaphaelL,

Circling back to notify that the updates are now complete for the MR Meraki RADIUS 2.0 article.
Thanks again!

Best, 

Feli

[FeliA]

Good day @RaphaelL,

Thank you for your patience with this matter. It's been confirmed that the Called-Station-ID value is indeed sent in the format of AP MAC:SSID and not BSSID:SSID. These corrections have been completed in the Configuring RADIUS Authentication with WPA2-Enterprise documentation as well.

Thank you so much for your awesome feedback and helping to keep the documentation at its best!

Best, 

Feli 

[RaphaelL]

Thank you sooo much for the update and taking your precious time to double check this matter