801.x bypass

piasterloo
Here to help

801.x bypass

Folks ,Is it possible to bypass 802.1x authentication for a wireless client (iPad) in Meraki ?

3 Replies 3
alemabrahao
Kind of a big deal

Yes, It is, you need to use the allow list.

 

I'm sorry for the wrong information, I just realized it now.

 

I am not a Cisco Meraki employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.
ConnorL
Meraki Employee All-Star Meraki Employee All-Star
Meraki Employee All-Star

A client still needs to authenticate to the SSID before any Allow/Deny lists come into play. Adding the client to the allow list would simply bypass any splash or firewall settings.

 

You'll need to create a separate SSID, however seeing as iPads do support .1x auth, what's the user case you're attempting to solve here? Cert based auth for devices like iPads works well. 

TBHPTL
Head in the Cloud

100%, you can't bypass 802.1X that happens before an IP is issued. Any bypass like MAB would have to be on the actual RADIUS server...

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco ID. If you don't yet have a Cisco ID, you can sign up.
Labels