I have a deployment with 350 Meraki switches using Cisco ISE 3.2 for dynamic VLAN assignment and no issues with VLAN association for silent devices (printers). In the Access Policy settings I have "802.1x Control Direction" set to "inbound-only". I also have re-authentication set to 12 hours. The "inbound-only" setting allows the printer to "hear" arp requests and receive print jobs from the printer server. An authentication, if needed, is only triggered when the printer responds to requests. I have done numerous deployments of ISE with Cisco switches. This is my first deployment of ISE with Meraki devices. Without the "inbound-only" setting, or equivalent on Catalyst switches, the printer never generates traffic to initiate authentication and also never receives traffic.
... View more