Will MS250 Switch Do 802.1x EAP-TLS Certificate Authentication To A RADIUS server

[mrieber]

Going thru the docs and other community posts I am having a challenge figuring out if the Meraki MS switches will support 802.1x using EAP-TLS with certificate authentication? 

[Mloraditch]

Yes that will work. I do this all the time with ISE.

[alemabrahao · Accepted solution]

Yes, definitely.

MS Switch Access Policies (802.1X) - Cisco Meraki Documentation

Access Manager Certificate Based Authentication - EAP-TLS with Entra ID Lookup - Cisco Meraki Docume...

[mrieber]

Ok, so I would just need to configure the RADIUS server for EAP-TLS authentication upload the certificate and configure the workstations Windows supplement to use EAP-TLS make sure it has a cert and then configure the Meraki MS switch to do 802.1x sending the auth to the RADIUS server?

[alemabrahao]

Basically that.

[alemabrahao]

I don't know what you are using for Radius, but this document may help you.

https://community.cisco.com/t5/security-knowledge-base/how-to-integrate-meraki-networks-with-ise/ta-...

[mrieber]

Thanks for sharing the links, the customer is in the Azure cloud so they are looking at a cloud based RADIUS server. I can use the doc's to help configure. Thank you