Meraki

B_Seiler

We see the same issue with many of our users. Does not happen all the time, and does not happen (as far as we know) with all users. More of a nuisance than a blocking issue.

B_Seiler

I have solved the issue. Meraki automatically blocks the first (default) SSID from accessing the local LAN. It was blocking DNS and all other domain traffic. (except for dhcp which it allows by default) What tipped me off? 2 things: 1-Seeing the network profile in Windows showing as "private" instead of "domain." 2-Comparing the target SSID to another temporary SSID that I set up that does not use radius but rather only a PSK. When I saw "Clients blocked from using LAN" I knew I was on to something. https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/%27Deny_Local_LAN%27_settings_in_Cisco_Meraki_MR_firewall You have to change the setting in Firewall and traffic shaping. Working great now.

B_Seiler

the laptop has another NIC connected to the LAN that is working fine (no "unauthenticated" message) and another wifi connection (the production wifi connection) that is also good. So I'm leaning toward Paccer's solution of a review of dhcp/dns config. I'll keep your suggestion in my back pocket for now, thanks!

B_Seiler

Thanks, Paccers, I am leaning toward this as well. Hoping to get quality time to troubleshoot this today and tomorrow.

B_Seiler

Seeing "Unauthenticated" on Windows Nic after connecting to Meraki wifi via Windows NPS (Radius) I am following this guide (Configuring RADIUS Authentication with WPA2-Enterprise) to configure Meraki Wifi.) Configuring RADIUS Authentication with WPA2-Enterprise - Cisco Meraki Documentation I set up a new test meraki network and have pushed out the wifi profile via GPO. The windows test laptop can connect to the Meraki wifi network via radius and receives an IP address correctly from our on-prem DHCP server. Radius auth using EAP-TLS is working. Only bug is the windows nic says "Unauthenticated." It's on the correct vlan and it has network access. What would cause this? The only thing I can think of is that I have not configured a "proper" (ie, from an enterprise CA) certificate for the NPS server. The NPS server does have an issued server cert from our standalone windows CA (we don't have an Enterprise CA yet). It does not seem to matter whether or not I click "Validate Server Certificate" on the gpo settings for the wifi profile. See below:

Meraki

Community

About B_Seiler

B_Seiler

Community Record

Badges

Re: Meraki AnyConnect-Secure Client connecting - disconnecting during start...

Re: Seeing "Unauthenticated" on Windows Nic after connecting to Meraki wifi...

Re: Seeing "Unauthenticated" on Windows Nic after connecting to Meraki wifi...

Re: Seeing "Unauthenticated" on Windows Nic after connecting to Meraki wifi...

Seeing "Unauthenticated" on Windows Nic after connecting to Meraki wifi via...

Re: Seeing "Unauthenticated" on Windows Nic after connecting to Meraki wifi...