Wireless network with splash page / AD authentication

SOLVED
Silas1066
Getting noticed

Wireless network with splash page / AD authentication

I see in the documentation that a MR33 wireless AP can use AD authentication and a "splash-page" sign on option.

 

Does this require that a certificate be installed on the Meraki AP? One that is valid on a public / commercial level, so that it doesn't throw up errors when users see it? Or is that not an issue?

 

1 ACCEPTED SOLUTION

The web page comes from the cloud and should not throw a certificate error The certificate you install on your AD is to validate itself against the AP, when doing logins, not for serving web pages.


Find my post helpful? Please give me a kudo!
CCNP Certified and Meraki Operator

View solution in original post

5 REPLIES 5
Adam
Kind of a big deal

By AD Authentication do you mean 802.1x Radius?  If so then it does look like you could have that selected for Network Access section and the spash 'Click-Through' is served by the Meraki servers so no certificate needed.  Capture.PNG

Adam R MS | CISSP, CISM, VCP, MCITP, CCNP, ITILv3, CMNO
If this was helpful click the Kudo button below
If my reply solved your issue, please mark it as a solution.
Silas1066
Getting noticed

Actually, I was think of this

 

https://documentation.meraki.com/MR/Splash_Page/Integrating_Active_Directory_with_Sign-On_Splash_Pag...

 

unless that requires the MX appliance

Chris_M
Getting noticed

You can do this in a few different ways. You can do 802.1x which can be implemented using AD.

 

Or, you can use splash page sign on with AD authentication. You will need to have a certificate on your server so the AP can validate against it when logging users on. The certificate can be self-signed but it is not recommended.


Find my post helpful? Please give me a kudo!
CCNP Certified and Meraki Operator

The AD server will have a certificate (self-signed), but I was wondering about the page that actually gets served up to the wireless clients.

 

That comes from the Meraki AP correct? I just wanted to make sure they didn't get certificate warnings/errors from it

The web page comes from the cloud and should not throw a certificate error The certificate you install on your AD is to validate itself against the AP, when doing logins, not for serving web pages.


Find my post helpful? Please give me a kudo!
CCNP Certified and Meraki Operator
Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels