Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Son
Son
Here to help
Member since Jun 28, 2019
Feb 6 2020
Community Record
13
Posts
5
Kudos
0
Solutions
Badges
Nov 5 2019
8:08 AM
Completely agree, I do the same and I agree that this seems much but this is our corporate guest wireless access, we are not providing access to the public. When we had open association we had random people connecting to our wireless network hence the PSK as well. Would just like to try and make it easier for them by removing the Meraki Account creation and a simple click through splash page which gets their name at least. According to our security team there is a legal requirement to capture an identifier of users on guest networks (might be different in the US) so even if they put a burner name in we are at least attempting this from the user. Sounds like it is not possible though from the repsonses.
... View more
Nov 5 2019
1:45 AM
Our guest networks have been setup with a Pre-Shared Key for association to satisfy a recent penetration test. We previously had an Open association with the user required to create a Meraki account which automatically authorised them onto the network - the reason for this is because we have a requirement to capture the users details that is associating with our network and this was the simplest way of doing so. Details such as Name and email address or phone number. We now have a bit of a tricky situation as our guest users must obtain the Pre-Shared Key and then they have to register by creating a Meraki account via the splash page and they need to remember those details each time they want access and might be a little too much for them to take the effort to start using the service. The splash page settings are set to every week now which should improve customer experience by being a once a week session association. We would like to know if there is a way of dropping the Meraki Authentication process and instead deploying a splash page which simply asks the users to enter a name and email address (and T&Cs would still be present) and have that information recorded on the Dashboard or to some logging device so we have a record. Taking away the need for the guest to remember a password and simply input their details would simplify the process and we would like to know if it is possible or if anyone else had any other suggestions. I know that you can amend existing Meraki splash page templates and there is one for click through but we would like to capture their information and use that process instead of using the Meraki Auth process. Hope that makes sense!
... View more
Oct 24 2019
7:51 AM
Hi All, We had a pen test on our Meraki networks and they came back with a high risk point being that the login to the Access Point (MR series) are using http and that you can't login to them with an encrypted connection. So I need to know if we can make this an SSL connection or not. I understand what could be done to lower the risk by changing the default password which I believe to be a device serial number. We just need someone professional to say yes or no this is not possible and then either act on the answer if yes or sign the point off if low as accepted risk. Thanks
... View more
Oct 24 2019
5:39 AM
Thanks @kYutobi kYutobi - I had determined that, I am more trying to find out what would cause the flag to change to "No" is it purely a manual administrator process to stop the access once automatic registration process is complete and the account is authorized? Or does that flag change to No once the 24 hour splash page frequency time has ended (which is what we have set)? I presume it is a manual change? Thanks
... View more
Oct 24 2019
12:11 AM
1 Kudo
Thanks Brecht will try that. Can you confirm if the authorized flag should be set to No after the splash page frequency of 24 hours has passed? i.e. this user first associated and created their Meraki account yesterday at 15:23, would I expect this to be Authorized: No after that? If that is the case and they are not authorized it would just be a case of them signing into the splash page again? Thanks!
... View more
Oct 23 2019
11:24 PM
Hi Community! I need some assistance with an issue we are experiencing and not sure how it is supposed to work so it might be by design! Our Guest network simply uses Meraki Authentication where the user has to create a Meraki account on our Meraki generated splash page which then gets automatically authorized. The splash page frequency for this network is 24 hours. Now... what I expect to happen is that the new user goes into the list of Users in the Dashboard and shows as Authorized by "Automatic"and that even after the 24 hours for the splash page frequency passes the accounts are still authorized for sign in they just have to login via the splash page again to access the network? According to one of my users in a new network we have just deployed after the 24 hours are up they try signing in with their Meraki account and they just get access denied and when I check their user on the portal they are no longer authorized. Is this the correct behaviour? I don't expect the accounts to lose their automatic authorization status after the 24 hours and instead expected the user to have to accept the splash page again although I might be wrong. I am sure that on one of our other networks guest network which is setup the same this is working as expected. Hope someone can help me understand / resolve this and how I can make it how we would like! Thanks Son
... View more
Sep 24 2019
12:21 AM
1 Kudo
Thanks for confirming this, it's exactly what we need, the same SSID name in different networks, we are using Radius authentication for our authentication matching the SSID name in the policy so hoping we get the same results 🙂
... View more
Sep 20 2019
5:14 AM
Hi All, Our business is built on acquisition and we have multiple businesses to support within our Group. I have created a Group level network within the Dashboard which contains sites from both UK and Ireland. Only now since I have checked in the Irish devices into this Group network (which is registered to UK) have I seen that there is a problem with this because of the regulatory domains settings. The issue I have is that most of our head office users will work in UK and IE from time to time so i'd like to have the same sets of SSIDs on each side and under the same network. I can see Meraki advise you to create a separate network for these devices in IE so they perform as they should. Can I create an SSID with the exact same names as the ones in the current Group network and the clients would treat them as the same? What would be the best solution for this? It would be simple enough to create a new network just a bit of a pain having to adjust both at the same time for changes and not sure what the user experience difference would be i.e. logging into the guest network which is using Meraki authentication (create an account which automatically authorises). Would they have x2 separate accounts with potentially different details? Thanks Son
... View more
Aug 21 2019
7:12 AM
1 Kudo
Massive thanks John this is working as expected. Now got to figure out why the traffic is not being routed as expected for these devices! Hopefully it is not anything to do with the Radius policy but doubt it, will review that and raise another case if necessary! Thank you
... View more
Aug 16 2019
5:49 AM
1 Kudo
Hi John, Thanks for this, so are we supposed to add the hyphens in as your screenshot denotes or should we just enter the characters only? See below a copy of our NPS policy, I had to create a new one to match the same SSID but this time with an AD user group which has the permitted user in who requires access with an iOS device and I have added the MAC address in the Verify Caller-ID for that user who i've asked to test. So all being well this will implement user / MAC authentication into one? Let me know if you spot anything incorrect with this? Thanks!
... View more
Aug 15 2019
8:10 AM
1 Kudo
Hi All, We are about to deploy our Meraki wireless solution in our business and out of the blue a new requirement has come up which we were not told about before! We have a requirement to allow some corporate owned iOS devices (iPads and iPhones) to be accessible on the corporate network, however, we are using Microsoft NPS server with PEAP authentication and a certificate from a trusted CA and allowing Domain Computers to be authorised onto the SSID. Obviously iPads and iPhones cannot be a Domain Computer so how is it best to utilise the NPS server and create a new policy to seamlessly allow these devices onto the network but restricting them by device not user. I guess some sort of MAC authentication would be best here. We want to use these tools only at the moment not purchase anything else such as Cisco ISE as an NAC. If someone could help and provide any documentation that would be great! Thanks Sonny
... View more
Jun 28 2019
2:12 AM
Hi Everyone, I need some assistance with the certificate required for the NPS server that allows both network clients and Meraki APs to validate the server's identity. We do not have a PKI so we will be obtaining a certificate from a trusted CA. I want to deploy two radius servers in our forest for resiliency and I want to use a single certificate for both of them. Do I need to generate a CSR from one of the servers to purchase the certificate from a CA? It needs to be a certificate that all our domain joined machines trust as well and we've been given the option of purchasing a GeoTrust certificate from our certificate provider. Would this work? Would I just need to add the certificate to the radius servers and then would we need to deploy the same certificate to our domain joined machines which exist in child domains within the forest it would be purchased from? My certificate knowledge is not the greatest hence the post, hope you can help. Thanks
... View more
My Top Kudoed Posts
| Subject | Kudos | Views |
|---|---|---|
| 1 | 5925 | |
| 1 | 8308 | |
| 1 | 16523 | |
| 1 | 16579 | |
| 1 | 16639 |
© 2024 Cisco Systems, Inc.
