Latest

Cisco Meraki: A Step-by-Step Guide to Adding ISE as a RADIUS Server for MAB SSID

Cisco Meraki: A Step-by-Step Guide to Adding ISE as a RADIUS Server for MAB SSID

In this article, we will going to discuss how to add ISE as a RADIUS Server for MAB SSID in the Meraki Dashboard. 

Cisco Meraki Setup
Fig 1.1- Cisco Meraki Setup

Step 1
:
Choose Access control from the Configure option on the Meraki dashboard.

Step 2: From the drop-down option, choose the SSID that the Workstation Identity Group will use.

Step 3: Make sure that under Association Requirements, the radio option for MAC-based access control (no encryption) is chosen.

Step 4: Select None (direct access) for Splash Page.

Step 5: Enter the ISE policy service nodes' IP address, port number, and secret in the RADIUS servers area and turn off the RADIUS testing

Amazon.com Best Deals Toys     ⭐Amazon.com Best Deals Health

Amazon.com Best Deals Electronics  ⭐Amazon.com Best Deals Video Games

Step 6: Choose Airespace-­ACL-­Name in the RADIUS attribute setting group policy name field. 

Step 7: Make sure you have disabled Assign group policies by type of device.

Step 8: In order to assign client IP, select Bridge mode.

Step 9: Select "Use VLAN tagging" from the VLAN tagging menu and Click Add VLAN under VLAN ID.

Step 10: For the Workstation VLAN ID, enter the name of the AP Tag.

Step 11: Choose Ignore VLAN attribute in RADIUS answers if you want to overrule RADIUS.

Step 12: Click Save Changes 

Meraki MAB SSID Network Access
Fig 1.2- Meraki MAB SSID Network Access

Meraki MAB SSID Addressing & Traffic
Fig 1.3- Meraki MAB SSID Addressing & Traffic

Continue Reading...