Eduroam

[mcn1841]

Hi,

    Has anyone connected Meraki to eduroam. The documentation states that I need to register all my AP's as clients. I only have 33 units but I can see how this is a pain if the number goes higher. Is there another way of accomplishing this? Can the MX be configured to act as a proxy to my local radius server? 

Any help is appreciated. 

[ww]

you only need one setting.

https://documentation.meraki.com/MR/Encryption_and_Authentication/Eduroam_Authentication_Integration...

what they need to config on the Eduroam federation-level RADIUS is not your problem i guess.. they probably have some script to do this on the radius.

[Ben]

Hi @mcn1841 ,

I have a network with Eduroam active at the moment. The safest and easiest way to do this is create a management VLAN for your network devices or AP's.  (e.g 10.0.1.0/24)

Put all your network devices in this range and do no allow any client devices to get in here.

After this you can ask the people who manage the Eduroam Radius server to whitelist 10.0.1.0/24 for radius authentication and accounting. This way you do not need to register them as separate clients.

All you need to do when this is active is make sure your AP's know the route to the Radius server IP. 

When you have this route the radius tests should work.

If they have not changed the ports it's 1812 for authentication and 1813 for accounting. 

If you have any other questions let me know!

Cheers,

Ben 

[AhmedK]

Hi Ben,

Are you still using the same setup for connecting MerakI MR to EDUROAM? 

Because I'm about to deploy the same scenario for  80 MR42 connecting them to Eduroam?

[Ben]

Yes, it's still active and clients are connecting to the Eduroam without any issues.