Cisco Meraki Windows Radius requirements.

[Lessandro]

Hi all, 

I got the scope to setup our wifi authentication via Windows Radius.

I’m going to setup a Windows EC2 on AWS and use the public IP Address to setup the wifi authentication on Meraki.

The connection between the Meraki device and the EC2 won’t be encrypted, therefore I was studying some way to make it safer, like the Meraki VPN to AWS where it won’t work for this specific scenario. Am I right or I’m missing something?

[alemabrahao]

Let me get this straight, you don't want communication with Radius to be via public IP correct? In this case, do you intend to close a VPN between a Meraki MX and AWS and communicate via VPN tunnel correct? If so, it is possible to do it that way.

[Lessandro]

ok - thanks.

Is there any official documentation explaining how to do this specifically for Radius? I'm following this one, https://ritcsec.wordpress.com/2018/08/12/a-visual-guide-to-setting-up-a-meraki-to-aws-site-to-site-v... but no luck yet.

[CptnCrnch]

You're probably best of with using a vMX in AWS that will natively be part of an AutoVPN setup. All RADIUS requests will then be transported over that encrypted connection.

[Lessandro]

Thank you, I'll take a look.