Wireless Authentication

[piasterloo]

Folks ,

Our WAPs are set up on the Management VLAN 50, while the wireless users obtain their IP addresses from VLAN 80. Authentication is managed through a RADIUS server. Is it essential to enable inter-VLAN communication between VLAN 50 and VLAN 80 for successful authentication?

Please advise and thanks

[michalc]

Which VLAN is the RADIUS server on?

If VLAN 50 - no need for interVLAN 

If other than VLAN50 - yes for interVLAN need.

There is also an option for alternate MGMT interface if needed.

[ww]

No

You only need connectivity between the management ip and the radius

[piasterloo]

radius server is not on prem...its hosted in the DC

[DHAnderson]

We have most of our clients using RADIUS for WiFi Authentication.  The access points are on a management VLAN and the clients are on a different VLAN.  No inter-VLAN traffic is allowed, and authentication works fine. 

[BlakeRichardson]

This documentation has a great image showing how the process works. 

https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_RADIUS_Authentication_...

So as long as your client can access the AP and the AP itself can access the Radius server you are all good.