MS120 Web Auth with Cisco ISE - Support?

[RichardChen1]

Doing a test on MS120 switch on MAB+WebAuth(Central Web Authentication with ISE)

I can't find any Meraki Doco on whether it is supported or how to do it.

So I followed the guide on ISE and setup the MAB + web redirection policy.

However, during testing, the redirection rule is matched, but there is no redirection on the browser.

Any idea?

Furthermore, how does ACL/restriction applied in this case?

[CptnCrnch]

First question: are you allowing the client to access a DNS server that can resolve "testise26.nadergroup.local"?

Second one: how does your "Walled garden" config look like?

[RichardChen1]

First question: are you allowing the client to access a DNS server that can resolve "testise26.nadergroup.local"?
Yes I suppose. The default vlan has no group policy applied.
I was wondering how to apply ACL?


Second one: how does your "Walled garden" config look like?
Allow ISE ip add only.

[CptnCrnch · Accepted solution]

Just stumbled upon this: https://documentation.meraki.com/MS/Access_Control/Change_of_Authorization_with_RADIUS_(CoA)_on_MS_S...

URL Redirect Walled Garden (Supported on MS210/225/250/350/410/420/425)

Seems you‘re really out of luck with MS120, without CoA you‘re pretty lost with this 😐