BYOD setup for Meraki single SSID on ISE

[Cyrus777]

Hello.

I am having a hard time to figure out some issues that I have with BYOD single SSID setup for Meraki network on ISE. I have followed this document and video to configure BYOD for our org. I get to the point that I can login with AD user/password and pass the PEAP (EAP-MSCHAPv2) authentication. from this point on Windows devices I get the redirect URL to my ISE and download the NSA successfully but when I try to install the NSA I get an error for untrusted cert and I continue but it fails eventually.  

For Mac OS ad iOS (iPhone) I download the cert but it doesn't move to next policy to eap-tls.

I'm allowing all traffics to ISE / DNS and other required webpages on walled garden on Meraki access control page for this SSID. 

[alemabrahao]

Take a look at this document.

https://community.cisco.com/t5/security-knowledge-base/how-to-integrate-meraki-networks-with-ise/ta-...

Search for BYOD.

[Cyrus777]

this doc is not helpful! 

[alemabrahao]

This documentation is for you to review your settings.

I also suggest that you check the ISE logs to try to find any errors, as well as a packet capture.

And finally I suggest you open a support case.