Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Become a member of the Cisco Meraki Community today
Get answers from our community of experts in record time.
Join nowAbout fatanu
Community Record
13
Posts
6
Kudos
1
Solution
Badges
a week ago
2 Kudos
Thank you everyone that responded to me and offered help. It was a bug in the firmware. I raised a case with Cisco support and got on a troubleshooting call with them. We rolled back the firmware from 17.1.4 to 16.9 and tested it, everything works fine and now the switch is relaying the radius request to the Radius server. The case has now been submitted to their development team and they can reproduce the scenario to test. For now, I will continue to use 16.9 which is working. Thanks everyone!
... View more
a week ago
2 Kudos
I just did two packet captures use cases on the uplink: 1) When the endpoint connected to the port with 802.1x policy is attempting authentication. The packet capture shows it is not sending any radius access-request out the uplink. This confirms why the ISE is not showing any log. 2) When i did radius connectivity test on the policy from the switch to ISE. I can see radius access-request packet going out of the uplink. This confirms why I am getting logs in ISE. So ultimately it's a switch problem. I have done exact access policy configuration from their documentation, so I am not sure what else to do again. If anyone can share a working access policy config, I will appreciate it. Thanks!
... View more
a week ago
Not yet, still exploring if anyone had experienced the issue, that is why I posted it here for solution.
... View more
a week ago
I said this because, Meraki is not even relaying the packet to ISE. It's just a weird issue, because there are no so many things to fill in the access policy page that I might have missed something.
... View more
a week ago
Maybe Meraki switches does not support PEAP..because ours is PEAP MSCHAPv2, and I have tried with two different switch model, MS210 and MS225...same result. ISE is not getting log at all. Do you mind sharing your access policy config to see what we are doing differently. this is a real big issue and blocker to moving past this POC, so it's giving me sleepless night. what meraki switches have you configured it with?
... View more
a week ago
I'm curious whether anyone has successfully gotten wired 802.1x to work on Meraki switches. Everything is working find with the wireless so far, but no single success yet for wired 802.1x. We are not doing anything with certificate , so EAP TLS is out of the picture. But we tried PEAP and TEAP no luck
... View more
a week ago
2 Kudos
only message like "802.1x Canned EAP Success" ...something like that.
... View more
2 weeks ago
@PhilipDAth Yes, wired autoconfig is enabled. WHen this client is connected to another cisco switch (catalyst) not meraki, it is able to authenticate and connected. So, that ruled out that the issue is from the client. It is a Meraki issue. We have tried different options, single host, mult-domain, multi-auth etc....same issue.
... View more
2 weeks ago
No, I'm using PEAP with MSCHAPv2. It only showing attempting to authenticate without prompting to login. All I just need is a log in ISE, then I can say the switch is relaying the connection authentication attempt to ISE. But, ISE is not seeing anything, and when you do radius test from the switch to ISE, I can see the log. The two switches show it supports 802.1x so I'm wondering what the issue are. MAB is working, just 802.1x is what I am having issue with. Its weird two different switches MS210 and MS225 are having the same issue.
... View more
2 weeks ago
oh...its a colleague...we decided to post it differently, we have been stuck on this issue for days....thanks for the quick response
... View more
2 weeks ago
Issue: We have an endpoint with a PEAP Ethernet profile connected to port 5 on a Meraki switch. We have also configured the 802.1X access policy on the Meraki switch and applied it to port 5. When testing the RADIUS server from the switch, it successfully reaches the ISE, and logs are visible in ISE. The endpoint is sending EAPOL Start and EAPOL packets to the switch, but the switch is not relaying the RADIUS packets to ISE. Additional Context: At first I thought it was the windows supplicant issue (as I have read some people had issue with Windows 11). I configured dot1x on a cisco catalyst switch, and I connected the same system to it. It immediately got connected and i can see the log in ISE. Then I ruled out windows as the issue, and norrowed it down to Meraki switch issue. I did packet capture on the port on the meraki switch the system is connected and I can see the endpoint is starting EAPOL and sending EAP packet, the switch is not just relaying it to ISE. I am having this issue with Meraki MS210 switch and as well as MS 225 switch. Raidus test from the switch to the ISE is visible from ISE logs but I am not see any logs for devices connected to ports that the access policy is applied to. Also, MAB is working on the port, but 802.1x is not working. Is there anything I am missing? This is driving me crazy. Please help out, this is a cry for help!!!
... View more
My Accepted Solutions
| Subject | Views | Posted |
|---|---|---|
| 1064 | a week ago |
My Top Kudoed Posts
© 2025 Cisco Systems, Inc.
