Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About Techie
Techie
Comes here often
Member since Feb 20, 2018
Dec 8 2020
Community Record
5
Posts
0
Kudos
0
Solutions
Badges
Dec 6 2020
9:10 PM
Hi Everyone, I am going to deploy an MX68CW to a branch office. They have an NBN FTTC connection that has a static IP. There is currently an IPSEC VPN tunnel with their current router to a virtual pfSense in the data centre that also has a static IP. No dramas with this setup. If the Meraki fails over to 4G, can it establish an aggressive mode tunnel to the data centre? I cannot select between main and aggressive mode types when I add a peer. And I also know that AutoVPN only works if both sides are Meraki devices.
... View more
I'm not opposed to it. Can you combine both certificate plus domain credential authentication?
... View more
Just had a quick thought: what if I were to keep RADIUS username/password authentication, but set a layer 3 firewall rule to deny all traffic to the LAN, then use whitelists for specific devices to bypass said rule?
... View more
AD authentication is fine, but we don't want employees to use their same domain credentials to connect their phones, tablets, and other 3rd party devices without our knowledge. So I suppose we can lock it down to only Windows domain computers (but what about MacBooks?) or MAC address filtering.
... View more
Greetings All, I have an MR53 configured to authenticate users via their Windows domain credentials. NPS is installed on a Server 2008R2 domain controller. Is it possible to configure an SSID to require both domain credentials AND a certain whitelisted MAC address in order to gain access? For example, allow the CEO's laptop, iPad, and iPhone, but not a regular employee's laptop. Would it need to be configured via the Meraki portal or exclusively on the Windows NPS side?
... View more
© 2024 Cisco Systems, Inc.
