Using a Sign-on Splash Page to Restrict Wireless Access by MAC address

[Ben0391]

Hello all,

I have tried to configure MAC-based authentication to a SSID without logging in to a splash page.

I have used this manual:

https://documentation.meraki.com/MR/MR_Splash_Page/Using_a_Sign-on_Splash_Page_to_Restrict_Wireless_...

Basically, I see the SSID and when I connect to a device, I see the splash page. For all unathorized users everything is fine.

For authorized users, who should be able to use the SSID I have created a group policy with "Bypass Splash-Page"-setting and bandwith limits:

This group policy is configured for the SSID on the clients settings:

In my opinion, with this setting the client should connect automatically, i.e. without logging into the splash page with the SSID? Or have I misunderstood something here?

[MarcP]

On your last screenshot, the device is not whitelisted for any of the SSID´s...

[Ben0391]

Hi Marc,

thanks for the quick reply. 
On the last Screenshot you can see, that for the last SSID a group policy is applied. 

The screenshot earlier shows the settings in the group policy? Does this work?

[MarcP]

Ah, I see, yes...

Well should work, afaik.

Or you could whitelist the client for this SSID completely? YOu did not write something about bandwidth limit or something like that.

whitelist bypasses the splash page as well.

Other option my be iPSK without Radius?

https://documentation.meraki.com/MR/Encryption_and_Authentication/IPSK_Authentication_without_RADIUS

[Ben0391]

I have tried it with "whitelisted", but I get still the Splash Page

Any other suggestions? For me this would be the easiest way to handle this....

iPSK without Radius is unfortunately not an option for us. But thanks for the link.