Campus Gateway - WPN / Tunnelled SSID / iPSK without Radius

[seankin]

Hi all,

We’re testing the new Meraki Campus Gateway and looking at Wi-Fi Personal Network (WPN) in combination with iPSK without RADIUS.

When attempting to use Tunnelled mode to the CG, we receive the following error message "Bridge mode is required because you have Wi-Fi Personal Network enabled."

From the documentation:
https://documentation.meraki.com/MR/Encryption_and_Authentication/Wi-Fi_Personal_Network_(WPN)#WPN_S...

Under the design considerations, it states:

• External DHCP server assigned (Bridged) mode must be used instead.

• The Tunnelled mode is not supported.

If Tunnelled mode isn’t supported with WPN, is it correct to assume that Campus Gateway deployments does not support iPSK without RADIUS + WPN?

Has anyone tested or had clarification from Meraki on this?

Thanks

[alemabrahao]

Campus Gateway deployments do not currently support iPSK without RADIUS + WPN, because Tunnelled mode is required for CG and WPN mandates Bridged mode.

[AlexanderN]

Yes, WPN requires bridge mode, obviously. 

[seankin]

Hi Alex, does that apply to SSIDs tunneled to the Campus Gateway? As that's not so obvious 🙂 

https://documentation.meraki.com/MR/Campus_Gateway_Overview_and_Specifications/Campus_Gateway_Deploy...

[alemabrahao]

It's not the support mentioned above. 🙂

Just to be clear, the answer is based on the tests I did. 😄

[seankin]

Hi @alemabrahao, the document states:

To enable WPN on a tunneled SSID, please follow the steps outlined in the Configuration Section of the Wi-Fi Personal Network (WPN) guide.

 

Is the document incorrect? 

[alemabrahao]

It is only supported with external Radius, without Radius it is mandatory to be in bridge mode.

[DarrenOC]

Is that you Kinsella?  You labbing something for us?

[seankin]

Can’t confirm or deny  👀