Nice, but the contact form doesn't work 😅 tried with 3 browsers on two computers... ... View more

Yes I remember looking at this too some years back, I just thought at some point that going to stakeholders and propose a Meraki solution that needs Aruba for monitoring would raise some eyebrows, at least TE is Cisco from this point of view, but if nothing comes forward I will consider these Aruba sensors, I like them.   At least I can sell the fact that having another vendor running monitoring should legitimate the solution even more, hoping they accept that operations may have to look at two dashboards ... View more

I was thinkin about TE, potentially put it in a mini PC with wireless and run tests, just it feels a little clunky, also if I remember good workstation agent would give Wireless telemetry better than server agent  but server agent has more potential tests that can be conducted. Is there something else you tried/had in mind about this solution? ... View more

Thank you @ddexterpark ,   I will give it a try, for now I am marking your answer as resolutive since there is no other alternative offered by Cisco/Meraki.   Thanks again, I will let you know when I can test it out. ... View more

Thanks for sharing this,   is this only for monitoring or is it possible to onboard via ZTP (as it happens with Meraki devices) and manage completely Catalyst 9K switches from Meraki dashboard?   if not available at the moment is it something in Cisco/Meraki's roadmap? ... View more

Hi Blake,   Our company uses Google identities for certain tasks and we have an organization managed in Google with our domain.   Using Google for guest access is a specific use case where we are not giving access to generic Google accounts but Google domain accounts under our domain.   What is the missing part is to have a chance to filter which user can be successfully authenticated rather than everyone under our Google domain.   Using RADIUS for this could be an option, yes but if we consider Google authentication then we should 1) do MAC address bypass authentication and redirect to Cisco ISE 2) integrate ISE to Google via SAML and retrieve user attributes from there 3) authenticate with a guest portal in ISE   if we consider other type of identities we would just simply lose the integration we have with Google identities and that would leave us to have maybe AD or LDAP but is the same story about point #1 of the previous consideration   another thing to consider is that MAB does not provide encryption, and only other available option for meraki to ISE guest portal is 802.1x authentication but this is traditionally something that cannot be easily managed by end users so we should eventually consider an open SSID for onboardin and another SSID for production (so 1 SSID more...) and this complicates the solution (after all is a guest access...right?)   One option may be to see if Google expose identities via cloud LDAP as I am reading here : https://cloud.google.com/blog/products/identity-security/cloud-identity-now-provides-access-to-traditional-apps-with-secure-ldap   in that case...would it be doable to restrict authentication by searching into a specific OU via LDAP search from Google identities?   Let's imagine I would do that for AD via LDAP...can I restrict to specific groups? If that is doable then I can see if Google identities via LDAP expose a similar structure of Google groups or attributes and restrict access in a more traditional way and keep it cloud to cloud   ... View more

Hi Shane,   Thank you for your input,   Can you elaborate more on point #2 ?   Thanks in advance! ... View more

for me is a problem that it can be configured only on the template configuration rather than on the network instance attached to it. I would have local guest ambassador for each site and I don't want guest ambassadors from every site to be informed about guest users created from other sites. ... View more