MR BYOD using ISE

[JasonD_NSI]

I'm trying to set up Meraki MR with single-SSID BYOD, where the same SSID is also used for standard EAP-TLS secure wireless for corporate assets. I can't figure out whether I should set the MR splash page to "None (Direct Access)" or "Cisco Identity Services Engine (ISE) Authentication" I don't want the corporate assets to have to endure a splash page every day. Is what I am trying to do possible, or will I need to switch to a dual-SSID BYOD?

[RaphaelL]

IMO the best way to do this is under a single SSID + None ( Direct Access ). 

Also configuring the SSID RADIUS attribute specifying group policy name to AirSpace-ACL-Name to allow ISE to push the Group Policy to your BYOD and override the vlan to separate your BYODs from your corporate assets. 

It is only a suggestion. Feel free to modify to your needs and security needs.

[alemabrahao]

Look at this article:

https://community.cisco.com/t5/security-knowledge-base/how-to-integrate-meraki-networks-with-ise/ta-...