Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Aneeshram
Community Record
13
Posts
0
Kudos
0
Solutions
Badges
Sep 22 2021
3:43 PM
Thanks wifijanotor. Exactly what you said, the issue we are trying address is the need to define each AP as a NAS client. I suppose IP range is the way to go here (provided the RADIUS server supports it)
... View more
Sep 21 2021
3:27 PM
802.1x enabled SSID’s. In order to explain what I am trying to ask, I will first relate to the scenario using a Cisco WLC solution so that you can understand my question a bit better. Lets assume the customer is using Microsoft NPS as their RADIUS sever. Current Setup - In Microsoft NPS, the Cisco WLC is setup as a RADIUS client with a shared secret. - In the WLC, the Microsoft NPS servers are setup as a RADIUS clients with the same shared secret. When we move to Meraki Meraki Solution (assuming I have got this right) - In the Meraki Dashboard, we would add the NPS servers as RADIUS clients (with a shared secret) - In the NPS server, we will have to add every AP as a RADIUS client (with the same shared secret) If the above is correct, then my next question is what is the recommendation for IP addressing the Access Points ? We were designing all the AP’s to get an IP using DHCP (which I understand is the recommended best practice), but if we have to setup each AP in the NPS server as a RADIUS client, then the IP address needs to be static? Correct ?
... View more
Hi GreenMan I'll keep that in mind. thanks for the advice
... View more
Hi Brash I not talking about a Site-to-Site VPN. Scenario I am referring to will have the tunnels between the AP and the Data Centre MX (one arm concentrator mode) (SSID tunneling) The SSID will be configured with "Layer 3 roaming with a concentrator" Will the L3/7 rules still function ?
... View more
Hi Brash The design I am working on will have a MX operating in "One Arm Concentrator Mode" in the Data Centre. The tunnels I was referring to are between the AP's and the MX in VPN concentrator mode. So yes, as you stated in your response, I am trying to understand if the AP firewall rules are applicable to a SSID that will have its traffic tunneled to the VNP concentrator. Guess i am trying to get my head around how the VPN traffic will be subject to the stateful firewall when the MR Access Points has no visibility inside this tunnel. But as per you response "These rules are applied when traffic hits the AP prior to being sent over a site-to-site VPN." Then i suppose thats how the rules are applicable. Thanks for your response
... View more
Can the “Firewall and traffic shaping rules” be applied to tunneled traffic, as in if a SSID is tunneled to the concentrator ? (talking about the Firewall capabilities on the AP) Trying to work out if the traffic has to be inline (bridged) for any filtering to work at an AP level ?
... View more
Sep 9 2021
3:24 AM
Hi Karstenl The customer is currently using this feature on the Cisco WLC and would like to continue to use multiple VLAN's when they migrate to Meraki, but if the MX can only tunnel to a single VLAN then i guess we will look at rearranging the backend subnets. But just wanted to check if it was possible first, before we go down the route of rearranging the network. Thanks for clarifying
... View more
Sep 9 2021
1:46 AM
Cisco WLC’s has a concept called “interface Group” whereby multiple vlan’s can be grouped and tied to single logical interface. A centrally switched SSID can then be configured to use an “interface Group” and the traffic for that SSID will be dropped into any one of these VLAN’s in a round robin fashion. To achieve central switching in Meraki, an MX device can be setup in concentrator mode. Can the Meraki MX (that will be configured in “concentrator mode”) also be configured with multiple VLAN’s per SSID ?
... View more
Sep 5 2021
5:41 PM
Hi there, I have a customer who is running the cisco enterprise wireless solution (dual controllers in HA) in a Datacenter. They have around 400 AP's deployed across two main campus 13 branch locations. 3 x SSID's are centrally switched (CAPWAP tunneled) and two SSID's are locally switched. The existing Cisco wireless solution is end of life and it is being replaced by Meraki wireless. I am looking for a transition document that captures all the aspects of planning for the migration from Cisco Enterprise to Meraki. Any help will be appreciated.
... View more
© 2025 Cisco Systems, Inc.
