Meraki AP with ISE on AWS using Public IP

[RaghavChandak]

Hi Team,

Looking for a possibility if we can have Meraki AP send Radius communication to ISE (Sitting in AWS) with Public IP space. ISE on AWS supports Public IP, I know radius is not encrypted protocol but if there a possibility like this ?

[KarstenI]

Because of the cleartext-nature of nearly everything in RADIUS I would always send the traffic through a VPN tunnel. Sadly the Meraki-devices don't support RADIUS-DTLS. That could be natively terminated on the ISE.

For the VPN my first choice would be to integrate an AWS-vMX into autoVPN, but a traditional VPN would also do the job.