Meraki

ggarolla

I know, I have already configured SAML authentication for the Dashboard. I am particularly interested in the EAP-TLS integration as mentioned by Chris a few responses earlier, maybe it was not really clear from my last message

ggarolla

I am looking into this as well. With the move to Entra ID, using RADIUS is really not feasible anymore. If Meraki could integrate this within the Dashboard, that would be amazing

ggarolla

The problem is that apparently the Wireless plugin in Forescout does not support Meraki APs, hence why I am not sure how and if I can add them as RADIUS clients.

ggarolla

Dear colleagues, I am looking into the possibility of migrating from our current 802.1X setup, which uses Windows Server NPS to authenticate both wired and wireless users, to Forescout. For your reference, we have Meraki switches and APs and we use EAP-TLS as authentication protocol. I was able to configure the wired authentication part, but I am having issues finding documentation or hints for the wireless part. I configured the Dashboard integration, using Meraki API and that works. However, I am not sure how to configure APs as RADIUS clients in Forescout and then I am not quite sure how to configure the authentication policy to differentiate it from the wired one. Do you guys have any experience in using Forescout as RADIUS server for Meraki APs? Thanks!

ggarolla

My bad, I was not very clear with my explanation. What worked for me was leaving the "Anonymous Identity" field empty, and using the username in the other field (I believe it is simply called "Identity", but that might depend on the Android implementation).

ggarolla

Do you use an MDM solution to configure your SSID in clients or do you manually configure it? In the latter case, I think the easiest solution would be to forget the network and then configure it again on the client: in the setup phase you have to select the correct settings, including which authentication protocol to use and the credentials. It is in this configuration phase that you will find the "Anonymous Identity" field. Unfortunately, I do not have a Pixel (or an Android) device at hand, so I am not able to provide a screenshot.

ggarolla

What authentication protocol are you using? On an SSID configured with PEAP I had a similar issue with Pixel phones. It turns out that that specific Android implementation was automatically populating the Anonymous Identity field, and that was not accepted by our NPS. I had to manually clear the Anonymous Identity field from clients and then authentication worked again

ggarolla

I am having the same issue (SSID using WPA2-PSK and clients all of a sudden showing EAPOL Timeouts, which does not make any sense), but I do not understand how enabling 802.11r could solve it, since we are using PSK. I will try it though

ggarolla

In 2024 I got my Master Degree in Telecommunications Engineering and I was promoted to Senior Network Engineer. In this 2025 I want to get my CWNA certification, perform wireless surveys in all our managed sites to improve Wi-Fi connectivity (always using our trusted Meraki access points), and finally get my CCNP R&S certification

ggarolla · ‎Aug 6 2024

Good day to everyone! I am nominating my colleague Tanya Velichkova, who works as a Full Stack Developer. She moved from Bulgaria to Switzerland to study at the University and she is now an important member of our IT Core Business Solutions team. Her beautiful attitude, her positivity, and her professionality bring so much energy to the office. It is a pleasure to work with her, as she has kind words for everyone.

ggarolla · ‎Jan 10 2024

I was able to test WPA3-Enterprise with 192-bit security. However, the option for 802.11r is disabled and cannot be changed: in WPA3 Specification there is no explicit mention of it being supported for the 192-bit implementation, but no further explanation is given. I suppose it might be related to some security concerns.

Meraki

Community

About ggarolla

ggarolla

Community Record

Badges

Re: Azure AD authentication on Meraki WiFi

Re: Azure AD authentication on Meraki WiFi

Re: Meraki integration with Forescout

Meraki integration with Forescout

Re: 802.1X authentication not working for google Pixel phone and Realme

Re: 802.1X authentication not working for google Pixel phone and Realme

Re: 802.1X authentication not working for google Pixel phone and Realme

Re: Authentication Issue 'eapol_timeout'

Re: Happy New Year! What are your Networking Resolutions?

Re: [CONTEST] Women's Equality Day

Re: WPA3 enterprise with RADIUS server (EAP-TLS)

Re: Happy New Year! What are your Networking Resolutions?

Re: [CONTEST] Women's Equality Day