Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- About GiovanniA
GiovanniA
Here to help
Member since Jun 6, 2019
yesterday
Community Record
5
Posts
2
Kudos
0
Solutions
Badges
2 weeks ago
1 Kudo
Dear Community, Can someone help me with a list of options to achieve Infrastructure as Code deployment with Meraki? I was looking at Terraform providers but I could not really find anything about that so rather than going straight to Python+SDK I would like to know if there is any other structured option to achieve the same outcome. thank you!
... View more
Labels:
08-21-2019
02:50 AM
Hi Blake, Our company uses Google identities for certain tasks and we have an organization managed in Google with our domain. Using Google for guest access is a specific use case where we are not giving access to generic Google accounts but Google domain accounts under our domain. What is the missing part is to have a chance to filter which user can be successfully authenticated rather than everyone under our Google domain. Using RADIUS for this could be an option, yes but if we consider Google authentication then we should 1) do MAC address bypass authentication and redirect to Cisco ISE 2) integrate ISE to Google via SAML and retrieve user attributes from there 3) authenticate with a guest portal in ISE if we consider other type of identities we would just simply lose the integration we have with Google identities and that would leave us to have maybe AD or LDAP but is the same story about point #1 of the previous consideration another thing to consider is that MAB does not provide encryption, and only other available option for meraki to ISE guest portal is 802.1x authentication but this is traditionally something that cannot be easily managed by end users so we should eventually consider an open SSID for onboardin and another SSID for production (so 1 SSID more...) and this complicates the solution (after all is a guest access...right?) One option may be to see if Google expose identities via cloud LDAP as I am reading here : https://cloud.google.com/blog/products/identity-security/cloud-identity-now-provides-access-to-traditional-apps-with-secure-ldap in that case...would it be doable to restrict authentication by searching into a specific OU via LDAP search from Google identities? Let's imagine I would do that for AD via LDAP...can I restrict to specific groups? If that is doable then I can see if Google identities via LDAP expose a similar structure of Google groups or attributes and restrict access in a more traditional way and keep it cloud to cloud
... View more
08-21-2019
02:40 AM
Hi Shane, Thank you for your input, Can you elaborate more on point #2 ? Thanks in advance!
... View more
08-15-2019
01:13 PM
1 Kudo
Hi Everyone, I am configuring successfully a Wireless guest SSID with Google sign-on but I would like to improve it by retrieving Google identity attributes to allow only users with a specific custom attribute (for example "WiFiEnabled" : "true") so I was thinking about options: 1) Is there an option of doing it on meraki cloud hosted splash screen (maybe with a custom designed splash screen?) 2) is it possible to restrict successful authentication coming from Meraki cloud only to certain Google Identity group? 3) would it be a viable option to have the guest portal on ISE and retrieve Google identities via SAML ? (as far as I know it can retrieve user attributes) but then I will have the problem of using MAB (that gives no encryption) or 802.1x (that can bee too complex for guest users) while now I have a rotating PSK
... View more
06-06-2019
08:25 AM
for me is a problem that it can be configured only on the template configuration rather than on the network instance attached to it. I would have local guest ambassador for each site and I don't want guest ambassadors from every site to be informed about guest users created from other sites.
... View more
My Top Kudoed Posts
