Meraki

Community
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Show  only  | Search instead for 
Did you mean: 

About TimS

Re: Meraki Client IP Addresses for Sign-on splash with customer-hosted RADI...

by in Security & SD-WAN
‎Mar 13 2018 12:59 PM
‎Mar 13 2018 12:59 PM
Client felt that this was the best way to centrally manage authentication across all of their global locations.   Meraki Authentication only appears to work for each Network so then they have to configure the guest at every site they may end up visiting.   Is there a better way to do this?   Client also pointed out how the RADIUS message is sent in clear text over the internet, exposing the username.  Would love another way to accomplish this. ... View more

Re: Meraki Client IP Addresses for Sign-on splash with customer-hosted RADI...

by in Security & SD-WAN
‎Mar 13 2018 11:30 AM
‎Mar 13 2018 11:30 AM
That only works for Internal User authentication.    For guest user authentication, the requests come from Meraki's cloud.   We have verified this with packet captures and it states this in the documentation I linked to.   Support just responded me and is telling me that we need to open the firewall for all of the subnets and add those subnets as RADIUS clients.  This seems like a bit of a security issue.  Especially since the rule isn't specific to RADIUS but also applies to NTP so much of those subnets could be referencing just NTP servers and have no need to be allowed inbound. ... View more

Meraki Client IP Addresses for Sign-on splash with customer-hosted RADIUS

by in Security & SD-WAN
‎Mar 13 2018 9:56 AM
‎Mar 13 2018 9:56 AM
I would like to implement a Sign-on splash with customer-hosted RADIUS for guest authentication. I am following the instructions at this link: https://documentation.meraki.com/MR/Splash_Page/Configuring_RADIUS_Authentication_with_a_Sign-on_Splash_Page I am trying to configure my RADIUS server with the proper client IP addresses for the RADIUS requests. In the documentation it states I can obtain these addresses from the Firewall Information page. However, the firewall information page just shows two /24 subnets and a /20 subnet as potential sources. This is way too many addresses to add to the RADIUS server. How can I get the actual specific IP addresses of the RADIUS requests to enter as clients? ... View more
© 2024 Cisco Systems, Inc.