Can you create 2 VLANS to use one SSID for Meraki MR55 with Radius Authentication?
I want to create the same global SSID for upstairs/downs but I want the downstairs clients to get a VLAN 160 IP address and I want the upstairs clients to get a VLAN 170 IP address.
How can this be done using one SSID?
Can I create two 802.1X connection policies (1 for VLAN 170 and 1 for VLAN 160)? in Radius clients I have two APS downstairs APs *with downstairs subnet* and upstairs AP *with upstairs subnet*
Will it be smart enough to connect and recognize coming from same ssid which vlan to come on to?
does it matter the order in the connections request/network policies tabs
https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_RADIUS_Authentication_...
You bet you can do this. You need to enable RADIUS override for VLAN assignment, then return the correct attributes in the RADIUS Accept.
https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/RADIUS_Override
You're going to have to configure your RADIUS server to make a decision on something though... Maybe NAS IP address? If the NAS is a downstairs AP then return downstairs subnet sort of thing.
does the order matter? When I put VLAN 170 upstairs in second after VLAN 160 downstairs(these are example vlans). I tried to connect since my downstairs AP is behind me and I am downstairs but it would not let me access (it authenticated me but said not internet)
When I moved the order where VLAN 160 was set as # 1 for processing order, I was able to connect. Switch downstairs has VLAN160 but not VLAN 170. Switch upstairs has VLAN 170 but not VLAN 160.
Assuming there's nothing else in those rules order shouldn't matter, but I would keep them together.
I like @NolanHerring 's solution here. That seems a lot easier.
@jdsilva wrote:Assuming there's nothing else in those rules order shouldn't matter, but I would keep them together.
I like @NolanHerring 's solution here. That seems a lot easier.
thank you - I will try and test later. to confirm, setup would look like this correct?