Hi    I have a set up a wireless network for one of our remote site where clients are meant to obtain an IP address from a DHCP server located at Head Office . However  I m unable  to connect to the SSID and getting the following error from the connection logs .     The Addressing and Traffic configuration is set to bridge mode  where wireless traffic has been tagged to Vlan 10 .     I can confirm the DHCP server is reachable as I can connect to different SSIDs that tunnels traffic to a concentrator .   Not sure where I m getting it wrong    Can  anyone please assist  ?   Thanks ... View more

Hi All    I m setting a new Network for one of our remote sites and looking to add some  Meraki access points for Wifi connectivity . These were initially used for a different site and getting re purposed for the new place . The APs are being managed through the Meraki Cloud platform .   The APs are currently connected to a Cisco switch ( 2960 X ) via a trunk link carrying the following Vlans.   2 : Corporate SSID 3 : AP Management Vlan ( Native ) 5 : Guest Vlan SSID   The switch is turn trunked to a Firewall ( acting as a DHCP server ) that has also been configured to carry the above Vlans.   Internet reachability has been confirmed and the correct policies are in place to allow the APs to check into Meraki Cloud.   After connecting the APs into the switch , they don t seem to be able to obtain an IP address from the firewall although other devices ( ie my laptop) can , nor can the firewall see them on the ARP table .   The light on the APs is currently showing amber .   This is the config applied to one the the switch ports   interface GigabitEthernet1/0/2 description AP switchport trunk native vlan 3 switchport trunk allowed vlan 2,5 switchport mode trunk storm-control broadcast level 10.00 storm-control multicast level 10.00   Can you please advise on what could be the issue here ?   Please find below the topology of the network setup        Thanks in advance ... View more

Hi All   I have been trying to deploy a wireless solution but been stuck with appears to be an authentication failure with the Radius Server ( ISE) . The set up consist of an Intune laptop attempting to connect  to a Meraki managed SSID .  I m using Meraki APs connected over a trunk to a Meraki switch that eventually traverses the Wan to the target radius server . All the required routing is in place to ensure the 802.1x messages can reach ISE , can also confirm  the device and CA root  certificates on the test device have been properly configured and that the correct policy is being hit on ISE.   EAP-TLS is being used as the  authentication method in this scenario    However with every attempt to connect to the SSID  it s getting stuck on the following     No firewall is processing the traffic and as mentioned the requests are getting into ISE .   Could this be related to authentication timeouts or MTU mismatch  over the Wan ?   Any help will be greatly appreciated    Thanks   Please find below the ISE logs for the failed authentication    Steps   11001 Received RADIUS Access-Request   11017 RADIUS created a new session   11117 Generated a new session ID   15049 Evaluating Policy Group   15008 Evaluating Service Selection Policy   15048 Queried PIP - Network Access.UserName   15048 Queried PIP - Radius.Called-Station-ID   11507 Extracted EAP-Response/Identity   12500 Prepared EAP-Request proposing EAP-TLS with challenge   11006 Returned RADIUS Access-Challenge   11001 Received RADIUS Access-Request   11018 RADIUS is re-using an existing session   12502 Extracted EAP-Response containing EAP-TLS challenge-response and accepting EAP-TLS as negotiated   12800 Extracted first TLS record; TLS handshake started   12545 Client requested EAP-TLS session ticket   12805 Extracted TLS ClientHello message   12806 Prepared TLS ServerHello message   12807 Prepared TLS Certificate message   12808 Prepared TLS ServerKeyExchange message   12809 Prepared TLS CertificateRequest message   12810 Prepared TLS ServerDone message   12505 Prepared EAP-Request with another EAP-TLS challenge   11006 Returned RADIUS Access-Challenge   11001 Received RADIUS Access-Request   11018 RADIUS is re-using an existing session   12504 Extracted EAP-Response containing EAP-TLS challenge-response   12505 Prepared EAP-Request with another EAP-TLS challenge   11006 Returned RADIUS Access-Challenge   11001 Received RADIUS Access-Request (      Step latency=2588 ms)   11018 RADIUS is re-using an existing session   12504 Extracted EAP-Response containing EAP-TLS challenge-response   12505 Prepared EAP-Request with another EAP-TLS challenge   11006 Returned RADIUS Access-Challenge   11001 Received RADIUS Access-Request   11018 RADIUS is re-using an existing session   12504 Extracted EAP-Response containing EAP-TLS challenge-response   12505 Prepared EAP-Request with another EAP-TLS challenge   11006 Returned RADIUS Access-Challenge   11001 Received RADIUS Access-Request   11018 RADIUS is re-using an existing session   12504 Extracted EAP-Response containing EAP-TLS challenge-response   12505 Prepared EAP-Request with another EAP-TLS challenge   11006 Returned RADIUS Access-Challenge   11001 Received RADIUS Access-Request   11018 RADIUS is re-using an existing session   12504 Extracted EAP-Response containing EAP-TLS challenge-response   12505 Prepared EAP-Request with another EAP-TLS challenge   11006 Returned RADIUS Access-Challenge   12935 Supplicant stopped responding to ISE during EAP-TLS certificate exchange (      Step latency=120000 ms)   61025 Open secure connection with TLS peer   5411 Supplicant stopped responding to ISE   ... View more