Meraki

alextsang010778 · ‎Feb 25 2023

I checked already, but no luck, so want to see any expert here know to configure the reauthentication timer or any default value of the reauthentication in Meraki.

alextsang010778 · ‎Feb 25 2023

Other WIFI manufacture implemented reauthentication timer, so the AP will perform reauthentication to the client when timer expired. So we would like to know if Meraki also has this timer? or it has a default reauthentication timer?

alextsang010778 · ‎Feb 24 2023

Hi all In Wired dot1x, we can configure the reauthentication timer in the suppliant to reauthentication after a certain period of time, so anyone know if we can do the same in Meraki in Wireless AP with dot1x authentication? Say reauthenticate the WIFI client running EAP-TLS every 24 hours? Best regards Alex

alextsang010778 · ‎Sep 28 2022

I follow this KB for the local auth authentication.

alextsang010778 · ‎Sep 28 2022

Hi all I tried to configure the local auth in the Meraki AP with password authentication, so we configure the LDAP Servers in the local auth to verify the AD username and password. But the authentication test in the LDAP configuration failed, and it said no response from LDAP server. Then I do packet capture to see what's wrong, and I found that the AP negotiate the LDAP server with SSL only, but those ciphers are disabled in the LDAP and only TLS1.2 is supported. So anyone know it is by design or how to change it to support TLS (I use LDAP browser to connect with the LDAPs and do packet capture, and the result is success and can see TLS1.2 negotiated. At last, I found that the local auth with password authentication cannot support with WPA2 only. Is it by design too? Best regards

alextsang010778 · ‎Aug 13 2022

Thanks Karstenl I checked the document, would like to see my below understanding is correct or not for the local auth. 1. If using password based - say EAP-TTLS/PAP, LDAP must be exist for the every user first login? Then MR will cache a hash of the credentials, so user can still login is LDAP is unavailable? 2. For the certificate based authentication - EAP-TLS, user can login to the SSID with a valid certificate issued by the issuing CA if the below requirement met. No external Radius and LDAP is required. 2.1 We will import the issuing CA certificate to the MR 2.2 Do not verify certificate with LDAP setting configured in LDAP option 2.3 Client's endpoint trust IdenTrust CA root cert 3. Maximum cache timeout is 24 hours, so is that the LDAP server must be resumed with 24 hours? Otherwise user cache expired and then client cannot login to that SSID?

alextsang010778 · ‎Aug 12 2022

Hi all Understanding Meraki can use tag configured by System Manager to do something like cert auth without using RADIUS (Detail in the link below). https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Certificate-based_Wi-Fi_authentication_with_Systems_Manager_and_Meraki_APs Does Meraki provide a method to do EAP-TLS with the existing MS PKI deployed but not deploying RADIUS and system manager app/enrollment? Best regards Alex Tsang

Meraki

Community

About alextsang010778

alextsang010778

Community Record

Badges

Re: Reauthentication in EAP (EAP-TLS or PEAP-MSChapv2)

Re: Reauthentication in EAP (EAP-TLS or PEAP-MSChapv2)

Reauthentication in EAP (EAP-TLS or PEAP-MSChapv2)

Re: TLS Support in Meraki AP to connect to LDAP when using Local Auth

TLS Support in Meraki AP to connect to LDAP when using Local Auth

Re: Do EAP-TLS with MS CA but without RADIUS

Do EAP-TLS with MS CA but without RADIUS

TLS Support in Meraki AP to connect to LDAP when using Local Auth