Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Become a member of the Cisco Meraki Community today
Get answers from our community of experts in record time.
Join now- About iGreggers
About iGreggers
iGreggers
New here
Member since Aug 28, 2025
4 weeks ago
Community Record
3
Posts
0
Kudos
0
Solutions
4 weeks ago
Fixing the mac for unmanaged devices is a nuisance for users. It also then means we have to anticipate every unmanaged device that connects to us before point of connection, which with our student user base is unmanageable unfortunately. Thanks for your input however.
... View more
4 weeks ago
Hey Alemabrahao. Thanks for your reply. Unfortunate to hear Entra ID splash page does not support dynamic VLAN assignment. EAP-TLS is what we're going to run for managed devices, but we're really looking to move away from 802.1x for unmanaged devices so that's unlikely an option going forward. It's my understanding that it's one application per Entra tenant, so it looks like I won't be able to make use of multiple entra applications either. I wonder then - perhaps I can use two separate SSIDs that go back to the same Entra tenant/application, and have each SSID whitelist different allowed domains for authenticating. That all depends on how the domain whitelisting works, and if I can differentiate between parent domains and child domains. Our example would be @School.edu for employees and @students.school.edu for students (our two core userbases).
... View more
4 weeks ago
To give context: my organisation currently has a requirement to provide Wi-Fi to unmanaged devices. 802.1x in general is confusing for users, and deploying certs/passports to them is an additional step of confusion and aggravation. I'm thinking of moving the authentication for that SSID to the Entra ID powered splash page. We have two core user bases, each user base having a different set of requirements, so we stick them on their own VLANs once authenticated. We are using 802.1x at the moment and we are returning a different Tunnel-Type radius attribute depending on which group the user falls into. This allows us to use one SSID to deliver two networks/vlans effectively. Is something like this still possible with the Entra ID splash page authentication, or will I need to have two separate SSIDs to make this work?
... View more
Labels:
- Labels:
-
Other
© 2025 Cisco Systems, Inc.
