Meraki

MauroF · ‎May 28 2025

ah ok. Can i ask then which other authentication methods are accepted to use only one SSID with EntraID and MAB together?

MauroF · ‎May 28 2025

Hi, Ryan who work for Meraki said: "You will need two SSIDs: one for MAB and a second for 802.1X." mmm

MauroF · ‎May 28 2025

ah ok...ive been told differentty here above but it seems like you are a meraki Employee so...well thanks for your help

MauroF · ‎May 28 2025

Hi Ryan, first of all thanks for your help. you say that SSID needs to be configured for MAB and Access Manager but if i set up the SSID for MAB...how can i authenticate on the same SSID my users againstEntra ID? At the moment my SSID is configured with "ENTERPRISE with ACCESS MANAGER". With this config i can authenticate my user against EntraID but not MAB. is that correct?

MauroF · ‎May 28 2025

This is my configuration....but when i connect to the SSID ,it asks me for username/password.Why? This is also my SSID config: any idea?

MauroF · ‎May 28 2025

Hi, I'm currently testing Access Manager and it's looking great! I just have a couple of questions: Is it possible to use the same SSID to authenticate both via Entra ID and MAB (based on MAC addresses assigned to a Client-group object in Access Manager)? Besides Entra ID, can I integrate other Identity Providers such as Google? Thanks in advance for your support! Mau

MauroF · ‎May 4 2025

Disable the application firewall installed in the PC or check the traffic shaping in the wireless setting if you have a "deny any LAN" in the rules.

MauroF · ‎May 1 2025

But i'll need to buy a DNA license,correct?

MauroF · ‎May 1 2025

But i'll need to buy a DNA license,correct?

MauroF · ‎Apr 30 2025

Hi, I'm trying to figure out how to convert Meraki APs (CW91xx) to Cisco mode so they can connect to a WLC 9800. I haven’t been able to find the procedure online. Could you help me with this? Thanks in advance. Mau

MauroF · ‎Apr 22 2025

Question: If I want users on a Meraki GUEST (SSID) network to access only the internet: 1) where should I configure the rules? Under the Wireless section or the Security & SD-WAN section? 2) Is there a priority of rules? 3) what happens if i configured the SSID to deny traffic towards LAN but in the firewall rules there is an Allow Guest-->Any? Thanks in advance

MauroF · ‎Apr 9 2025

So the port should be in ACCESS on port 999 (for reference ,of course)?

MauroF · ‎Apr 9 2025

and them should i configured this vlan"different for all the other) via Local status page before i attach the cable? not sure how to do it to be honest..help would be appreciate 🙂

MauroF · ‎Apr 9 2025

Thanks Ryan, In your slide, page 4 (this is my case) it says: "Place the MX LAN port in a VLAN that’s removed from all other MX LAN ports & disable DHCP on that VLAN." What does it mean?

MauroF · ‎Apr 8 2025

Question for the experts: I have a MG52 antenna that needs to be connected to an MX68W, which has two PoE ports. I was wondering if it’s possible to connect a PoE cable to port 11 on the MX and another cable to the WAN1 port at the same time. Would this setup work?

MauroF · ‎Mar 10 2025

Not really. First of all we authenticate via AAD DS in Azure which sync with EntraID. So there is integration from this point of view. But what i just said...is thanks to a different MX (mx68). I cannot do the same with a MX68W.

MauroF · ‎Mar 10 2025

Hi, How can I authenticate my clients with Entra ID using only the MX68W? It seems that the MX68W has limited options for Wi-Fi authentication via Entra ID. Given that Entra ID is a must, do you have any suggestions on how to achieve this? Thanks, Mauro

MauroF · ‎Mar 3 2025

plus: i can block the communication between the 2 vlans but i will always see the APPLETV from another network. My target is that APPLE TV can be seen just within the same network

MauroF · ‎Feb 28 2025

Bonjour is disabled in the appleTv vlan

MauroF · ‎Feb 28 2025

Wifi van 24

MauroF · ‎Feb 27 2025

Isolation is just withing the network.

MauroF · ‎Feb 27 2025

They need to talk each other

MauroF · ‎Feb 27 2025

Hi, I have an issue. My VLAN 24 (Wi-Fi VLAN) has an Apple TV device. I'd like the Apple TV to be advertised only within the same network. Currently, even though Bonjour is disabled below the SSID, I can still see the Apple TV from other VLANs(vlan 50). The strange part is that if I get an IP in the same VLAN (vlan 50) via cable, I cannot see the Apple TV (which is the expected behavior). Just to summarize: - If I connect via Wi-Fi in VLAN 50 (for reference), I can see the Apple TV. - The same VLAN, but wired, I cannot see the Apple TV. Any ideas? #AppleTV

MauroF · ‎Feb 6 2025

Support told me i needed to configure a QUERIER (creating a L3 in my CORE). Still havent tested it but it seems the communication L2 needs a Querier.

MauroF · ‎Jan 21 2025

Hi there, thanks for your message. I had already checked the L2 file. I can say that i see Membership Query and Membership Report on my capture...so probably..the network side is OK..i guess.

About MauroF

MauroF

Greg

Community Record

Badges