Meraki

R1d3rOfD0om · ‎Apr 24 2020

thank you, well, yes, we wanted to see to get rid off ISE and explore a stylish Meraki solution but seems like @BrechSchamp mentioned, we have to use strictly a radius in some way, The DUO looks like a solution but still I guess as long as you enter a valid credentials, it will let you in as many devices you have in hand we wanted to see a similar way to restrict devices per user like ISE does ( thats my understanding of the ISE 2.2) the problem is like if a user has a BYOD, it can bypass the certs or even a chromebook from the enterprise which is not added to the domain, Im gonna check and keep investigating further cause having ISE is ... otherwise, we will have no choice and rather upgrade our ISE and explore that feature, super thanks everyone

R1d3rOfD0om · ‎Apr 23 2020

interesting, thanks so much, that does the temporal trick for now in a testing deployment environment, I will investigate further since we want to deploy for more than 10K+ users but as I mentioned, our ISE is very old that does not do that anymore,

R1d3rOfD0om · ‎Apr 23 2020

hi Meraki warriors, I would like to know if there is any way to limit an SSID to allow only 2 devices only, perhaps not manually, something similar to ISE but in essence, lets say I have one user in our Corp SSID, but that use can use as many devices he can have and there is no limitation, We have ISE but the current version is obsolete and it does not have that feature, we tried via certificates but when it came the Chromebook world to play, the previous guy in charge override in some way that, to bypass the certs and now any user with any PC not being in the domain can join the corp as long as they have the right credentials for sure, So Im looking a solution that will enable me to limit the devices per user, now that we are not using ISE any ideas?

R1d3rOfD0om · ‎Apr 22 2020

Sorry for the late reply, just wanted to give you an update, it was such a simple click, I was overwhelming myself coming from ISE world, but yes, it worked by adding the network of the network attached to the network template and it worked, thanks so much for your advise everyone

R1d3rOfD0om · ‎Apr 2 2020

thanks for the info, let me try to create a new template and start testing to see how it goes Regards,

R1d3rOfD0om · ‎Apr 2 2020

Thanks Sir, I see, I was confused thinking still of the Cisco Wireless Controller, I thought the MX450 acts as a controller for that purpose, The current wifi infra is ISE as radius WLC added as network device in ISE Cisco APs connected to WLC using flexconnect, so we use a native vlan for registering each AP to WLC, one subnet for corp and one subnet for guest access so, if my logic is right, in the meraki world, this does not exist anymore, Im confused because in ISE need to add the Meraki AP as a network device lets say I create a new network template, assign vlans and subnets, input the correct parameters for WPA2, etc and radius which is the ISE which IP do I assign as network device in ISE? the way is now, its a template based on the network but the meraki AP gets a public IP Do i need to create a new subnet under security and SD-WAN and make it to act as management IP ? or which IP do I use to be added under ISE? sorry if Im not providing the info, but if you need anything else, please let me know

R1d3rOfD0om · ‎Apr 1 2020

Hi folks, Not sure if this is the right place, I apologize for this, Im struggling gathering ideas on how I can make this to work I have Cisco ISE as radius and a corporate wireless using dot1x already integrated with AD I have deployed a MX450 as a hub and MX68 as spokes where needed, everything is set up now, but basically what I want is to create lets say a 192.168.10.0/24 for corporate wireless simulating the internal LAN , so users on the 192.168.10.0/24 can be as if they were connected in the real corporate wireless inside the enterprise, Under ISE settings, I need to add the appliance like if it was a WLC but its a private IP, however, the MX68 gets a public IP Under ISE which private IP do I use? the HUB or the individual spokes MX68s? they use a public fake IP randomly assigned by the HUB Im new to this meraki tech, so not sure how to make that work. My issue is how can I make a communication from the internal ISE private IP to the MX? is it each MX that I need to ad as network device under ISE? or just the HUB and the hub can give orders to each MX68? is there any documentation that shows ideas? so in summary is which MX private IP do I use to set ISE? if they all have public ones in other words, how can I move my current private wireless SSIDs currently working to the MX68 and being authenticated to ISE?

Meraki

Community

About R1d3rOfD0om

R1d3rOfD0om

Community Record

Badges

Re: Limit devices on wifi

Re: Limit devices on wifi

Limit devices on wifi

Re: ISE with and MX450

Re: ISE with and MX450

Re: ISE with and MX450

ISE with and MX450

Re: Limit devices on wifi

Re: ISE with and MX450