Meraki

Community

About pmonardo

Re: MAC-Based Access Control and external captive portal

by in Wireless
‎Jul 24 2018 4:02 AM
1 Kudo
‎Jul 24 2018 4:02 AM
1 Kudo
yes i was. i suggest opening a tac case if that is the case ... View more

Re: MAC-Based Access Control and external captive portal

by in Wireless
‎Jul 19 2018 8:05 AM
‎Jul 19 2018 8:05 AM
@HodyCrouch wrote: You can create a group policy that bypasses the splash page.   You would then use MAC-based authentication and have your radius server set that group policy for known MAC addresses.  For everyone else, the radius server would grant access without setting the group policy.   Unknown MAC addresses would then see the splash page.   Exactly like HodyCrouch said. I thought I mentioned it above? Basically the radius server allows ALL MAC AUTH to occur Group policies like so (see attached).   You must build the logic in your radius server and splash page server.   ... View more

Re: MAC-Based Access Control and external captive portal

by in Wireless
‎Jul 18 2018 12:11 PM
1 Kudo
‎Jul 18 2018 12:11 PM
1 Kudo
We simply went ahead with the warning message.   MAC-based access control (no encryption) and Sign-on with (using My Radius Server).   In our case, we are leveraging the same radius server for MAC-auth and the Splash page. We also send back the following radius VSA (Aruba-User-Role) since we cannot specify a NAS ID in our radius configuration (since we are not using WPA2-Enterprise and this is an Open network).   We use group policies with the names being the ones returned by our radius server in Aruba-User-Role. The first group being the same as the SSID configuration with the splash page, etc. The second group simply bypassing the splash page. ... View more

Re: Will Meraki MR33 work with POE injector 48v 0.5A

by in Wireless
‎Apr 25 2018 5:50 AM
‎Apr 25 2018 5:50 AM
Are there features that are downgraded if used with POE vs POE+. For example, the 2.4ghz radio will be downgraded to 1 x 1 instead of 2 x 2 if POE is used? ... View more

Re: MAC-Based Access Control and external captive portal

by in Wireless
‎Apr 17 2018 7:13 AM
‎Apr 17 2018 7:13 AM
Ya we could probably do it using the splash page radius but that means after association only which defeats our purpose since we need it prior or else CNA will attempt to trigger, etc. We need to intercept it prior so wondering why it allows me to save but throws up an error. ... View more

MAC-Based Access Control and external captive portal

by in Wireless
‎Apr 17 2018 5:27 AM
‎Apr 17 2018 5:27 AM
Hello everyone, First post here. Take it easy on me 🙂   We have developed an integration with Meraki to display our own external captive portal which works great. We are now working on a seamless auth scenario.   User connects to SSID A, gets the splash page, processes splash page. Session is created (ie. 3 months) User comes back 1 week later, connects to SSID A, seamless auth occurs and user is granted internet without having to process splash page.   Now we have a working POC but what irks me is the following in the screenshot attached. It throws up an error but allows us to save and our POC works....Any idea why we "can't" do this?       ... View more
© 2024 Cisco Systems, Inc.