Hey Philip, thanks for the clarification, so my Win server is a 2012, in the NPS I tried to make it stop caring about the NAS port type, but I couldn't, I didn't see any option to disable this setting, I tried un-check all option, or checking all them, but both ways it is not working.   Any orientation ?   Thanks. ... View more

Hi Nash, I really didn't read this article, thank you.   Reading it now, I see that my Request Policy is different from the example, I am using the default one about the time of the day, I think is not the problem in my case.   Although maybe my Network Policy need to change or I will create a new one with this settings*** as the article indicate. My conditions as I said before is only asking for the Windows Group Domain Users. The NAS port type setting is together in the same session as settings about encryption, maybe will make a difference in my case changing the encrypted type to exactly as the article says. Anyway even with it is not looks like that it will have a relationship about NAS type port, maybe it will do a trick and fixed my situation ? I will try and post the results. Thanks !!     ***Deselect all checkboxes and select Unencrypted authentication (PAP, SPAP). An informational box will be displayed press No to continue and press Next.  For security information about using PAP click here. ... View more

Thank you Nash. Yes I did, my wireless WPA2-enteprise is working fine by the way, my default policy is a very basic one, basically is says if you are from my Windows group all users and use any kind of EAPS you have access granted...   When using the Meraki to test my NPS I receive a pass too, but with the VPN, because its inability to recognize the NAS port type, its is not letting my users when coming from the VPN connection to have access. ... View more

Thanks Philip !!!   I didn't know that there was a difference on the NAS thing between WPA2-Enterprise and the Splash page when using the cloud to host it 😄 ... View more

Philip, How I say/set that the meraki cloud will be my central NAS device ?? Or  its by default (and i really didn't understand before)? Like, when I have the Radius and Access Points on the same/routable network, I needed to add the APs as the NAS clients themselves( i dont remember if there was a Radius proxy/concentrator in the meraki configuration), I did never have to do something to make my Radius talk to the Meraki cloud. . ... View more

I dont know if will be there a tunnel, but probably it will not have a MX on each store. I am thinking of using the Meraki as the splash page(built-in), tweak it to look nice(and have  the meraki cloud infra to sustain a page to me is better) and have it asking a Radius that will be talking to somekind of SQL database probably. So, based on what you guys answered is as I expected, the NAS cliente will not be the Meraki cloud portal.Yes ? So without VPN, this kind of deployment is possible ? Need the Fixed IP, Redirects Ports or the Radius having a public address...??? ... View more

Thanks !! This resolve my case as well  ... View more