No Internet when connected to Meraki AP

[Ganesh-FAI]

We have a weird situation as when client connects to Meraki Wireless Infra , Authentication &Authorization happens correctly but there will be no Internet connected to the AP , this is happening for users randomly

We have Meraki MR57 & MR33 in our Infra & for Auth we have Cisco ISE which is working perfectly.

Any Suggestion would be fine for us to T-shoot

[Seenu]

Summary 

• Clients are able to authenticate, authorize, and connect successfully.

• After connecting, they lose internet access.

Things you can do

• Are all affected clients connected to the same AP when this happens, or is it random?

• Ensure the Meraki APs are running on a stable firmware version.

• When did this issue start? Have there been any recent changes on your side?

• Check the network path — confirm VLAN, STP, trunk/access, and other configurations are correct.

• Normally, an AP should not cause this since it only extends the wired network.

• Do wired clients also face this issue, or is ISE not used for wired clients?

• In summary: check firmware, roaming logs, event logs for clients and SSIDs, verify wired client behaviour, and inspect the physical network (cables, paths, etc.). With more details, we can narrow down the root cause.

This is my understanding based on the given details.

[GIdenJoe]

It might be a good idea to check where the issue happened.  So if you are sure every ISE session is succesful then you will need to check the datapath.

Especially when using ISE and possible use custom VLAN numbers in sessions, it is possible that one switch port containing an AP has that VLAN missing.

If you are 100% sure all AP's are correct then you will need to run a pcap in the switchports where the issue is happening or the wired side of an AP to see where the user traffic is dropped at.

Most ocmmon issues are VLAN tagging or L3/4 firewall settings on the SSID or Meraki group policy.

[alemabrahao]

This can be caused by several reasons; take a look at this guide.

https://documentation.meraki.com/Wireless/Troubleshooting_and_Support/Troubleshooting/Wireless_Issue...

[TBHPTL]

My money is on missing VLAN from either the AP's trunk interface or missing the VLAN from the uplink on the core infrastructure.

AAA happens BEFORE an IP is issued.

Is an IP issued?

[PhilipDAth]

Try the AI assistant:

Ask a question like:

Diagnose WiFi connectivity issues from the last 24 hours.

If you know a specific client, add that to the prompt.

[PhilipDAth]

What does Wireless Health report?