Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Register or Sign in
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
About validity-infras
validity-infras
Just browsing
Member since Jul 20, 2023
Sep 7 2023
Community Record
3
Posts
0
Kudos
0
Solutions
Aug 8 2023
11:05 AM
I did and got zero assistance. I was told to take the issue up with either Microsoft or our PKI provider as the issue wasn't on their end, essentially.
... View more
Aug 1 2023
10:20 AM
Forgot to setup email alerts for this topic. Unfortunately the AD CA was up and running long before I got here, so I am stuck with it now. The documentation doesn't help much as I have followed and am able to get the whole system to work fabulously for our Windows users. The issue is our Mac users. There are three running theories as to the root issue. The first is that the domain was setup not with best practice's in mind; using a non-routable .int for example. The second is that we are missing something on the NPS side as we have the Meraki wireless network setup exactly as the documentation describes and it all works great for our windows users. The third is that we are missing something on our Mac MDM (JAMF) side in distributing the 802.1x profile and/or the certs.
... View more
Jul 20 2023
11:06 AM
So we have a somewhat unique situation that I am trying to figure out any solution that works.. We are currently using Meraki hardware for our wireless system and we have a directive from management to work to integrate out various systems so that we can deploy a company-wide wireless network(s) that used cert based authentication instead of the current username/password that times out every couple weeks. For further context, we have windows based servers with a local AD domain synced to Office 365. We are also using one of our DCs as a CA, but it is not being used for anything. We have several NPS servers setup and we can get our windows, domain joined machines to work fairly well on the Meraki System. The problem comes in with our Mac users. Our AD domain was setup moons ago when using a .int TLD for the domain name along with other best practice issues that would be too disruptive to properly fix. As of now, we can't get our Mac machines to properly authenticate or trust the Wi-Fi networks when we use the NPS profiles/certs. We did recently get invested in a PKI system through digicert that we are currently using for our Client VPN and have been trying to use auto-enrolled certs from that, but similarly to no avail. The final nail in the coffin is that we are under a budget crunch, so investing in something like JumpCloud or some other online hosted RADIUS service is not happening anytime soon. I have looked at the documentation for Setting up 802.1x and we can do user authentication fairly well, but we have been instructed to get machine/certificate based authentication working. Long story short, what I am hoping to find is an article or video or something that discusses setting up windows NPS to interact with Meraki SSIDs so that both domain joined PCs and non-domain joined Macs can use one or more SSIDs to do cert based authentication.
... View more
© 2024 Cisco Systems, Inc.
