WPA2-Enterprise with public radius

[Lander]

Hi expert

I would like to config WPA2-Enterprise with my radius server .  But my radius is public ip address . Could I config public radius for this authentication method. If the can , I need add what ip for on my radius as radius client.? 

[HodyCrouch]

Use the RADIUS Proxy setting and then click on the "firewall information page" link to get a list IP addresses that will be used for RADIUS authentication.  Add those IP addresses to your RADIUS server.

[Lander]

@HodyCrouch Thanks for you reply. I click on the "firewall information page"  found a lot of ip list. I can't sure which ip need to add my RADIUS server . 

[Lander]

@HodyCrouch Could you tell me whick IPs need add my Radius server.  How to see ? Thank you very much

[HodyCrouch · Accepted solution]

Look for a row with the description "802.1X with customer-hosted RADIUS" (you may see two rows).

Ignore the row that starts with "Your network(s)".  You would use this information if your RADIUS server was hosted in your own data center and needed a firewall rule for the outbound traffic.

Look at the other row.  The values in the "Source IP" column are what you need to add to your RADIUS server.

[Lander]

@HodyCrouch I found 209.206.48.0/20 . That mean this whole subnet neet to add my radius ??    If enable Radius Proxy feature. That mean Access-Request messages sent from Dashboard to the RADIUS server ???

[HodyCrouch]

Yes, you need to add that CIDR range to your RADIUS server.

The Access-Request messages will come from Meraki's data center, which is probably what you meant by saying Dashboard.

[Lander]

@HodyCrouch  OK , I understand. Do you have official document for Radius Proxy .  Because I can't found any document about Radius Proxy feature.

[HodyCrouch]

I don't work for Cisco.  It sounds like you might want to open a case with this question.

[Lander]

OK,Then, Have you configed this feature and successfull on you network?

[Lander]

@HodyCrouchOK,Then, Have you configed this feature and successfull on you network?

[HodyCrouch]

Yes.  I have a pair of FreeRADIUS boxes running in AWS providing 802.1X authentication to a large number of sites through Meraki's RADIUS proxy.

[cf-nick]

Have you been able to find it yet? I havent.