I have a couple of Meraki MX64W devices talking back to campus for 
authentication and can successfully broadcast eduroam.  I defined the 
management subnet of the Meraki devices in my RADIUS auth system, assigned a 
shared secret, and it works pretty well.  I even have a Cisco wireless voip 
phone working on it.

With the MX devices, however, they do not seem capable of assigning VLANs based 
on radius response, so I cannot put users from other institutions on a DMZ – 
anyone who auths successfully gets bridged into the same VLAN.  I read that the 
MR access points do have this capability.

--
Bryan Ward
Network Engineer
Dartmouth College Network Services
603-646-2245
bryan.w...@dartmouth.edu<mailto:bryan.w...@dartmouth.edu>

From: The EDUCAUSE Wireless Issues Constituent Group Listserv 
<WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> On Behalf Of Christina Klam
Sent: Friday, July 27, 2018 7:29 AM
To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU
Subject: Re: [WIRELESS-LAN] Meraki AP connectivity to eduroam

Listening with great anticipation.

We are hoping to get eduroam up and running at our remote sites — which both 
use Meraki.    As we are not using the wireless concentrator option in Meraki, 
we have listed every AP in our clients file.  This may be fine for now but will 
be  burdensome if we expand our use Meraki.

Regards
Christina
Sent from my iPhone

On Jul 27, 2018, at 05:16, Mike Atkins <matk...@nd.edu<mailto:matk...@nd.edu>> 
wrote:
Our radius admin would define the management subnet of the Meraki APs in our 
radius server configuration.






---Mike Atkins
sent from phone

On Jul 27, 2018, at 3:21 AM, Mark McNeil [Staff] 
<mcn...@fordham.edu<mailto:mcn...@fordham.edu>> wrote:
Hi everyone,
     I'm wondering if someone can provide a little clarity on configuring 
Meraki to connect to eduroam. The documentation states that

" The MR's will need to be defined on the RADIUS server as RADIUS clients 
(consult RADIUS server documentation to complete this step). "

I take this to mean that I will need to define all my AP's, in my case MR42's, 
in my local RADIUS. Is this correct or is there another way around this on the 
Meraki. I only have 33 AP's but seems there should be another way.

Any help is appreciated.

Thanks

Mark

--
________________________________________________________________________
Mark McNeil
Director, Network Engineering and Operations
Fordham University | Fordham IT
Tel: 718-817-3763
Business Office: 718-817-3750
Fax: 718-817-5775
email: mcn...@fordham.edu<mailto:mcn...@fordham.edu> 
<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.fordham.edu%2F&data=02%7C01%7Cbryan.ward%40DARTMOUTH.EDU%7C9d81cf1050344d277c4408d5f3b4382e%7C995b093648d640e5a31ebf689ec9446f%7C0%7C0%7C636682877726529301&sdata=RLDIT3NiCNmWwZph8pA9GRzH%2FVYFAQNCm8tEpJiJrWU%3D&reserved=0>
http://www.fordham.edu<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.fordham.edu%2F&data=02%7C01%7Cbryan.ward%40DARTMOUTH.EDU%7C9d81cf1050344d277c4408d5f3b4382e%7C995b093648d640e5a31ebf689ec9446f%7C0%7C0%7C636682877726539317&sdata=3EgkrTjr%2FrwnTkHRCopplF8PTreykTQvioyAR4utS2I%3D&reserved=0>
_____________________________________
********** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.educause.edu%2Fdiscuss&data=02%7C01%7Cbryan.ward%40DARTMOUTH.EDU%7C9d81cf1050344d277c4408d5f3b4382e%7C995b093648d640e5a31ebf689ec9446f%7C0%7C0%7C636682877726549322&sdata=drrQ8mRf6br7aeFCP2bi%2FyDS0Wz5G1EhhiA6RT802eY%3D&reserved=0>.
********** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.educause.edu%2Fdiscuss&data=02%7C01%7Cbryan.ward%40DARTMOUTH.EDU%7C9d81cf1050344d277c4408d5f3b4382e%7C995b093648d640e5a31ebf689ec9446f%7C0%7C0%7C636682877726549322&sdata=drrQ8mRf6br7aeFCP2bi%2FyDS0Wz5G1EhhiA6RT802eY%3D&reserved=0>.
********** Participation and subscription information for this EDUCAUSE 
Constituent Group discussion list can be found at 
http://www.educause.edu/discuss<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.educause.edu%2Fdiscuss&data=02%7C01%7Cbryan.ward%40DARTMOUTH.EDU%7C9d81cf1050344d277c4408d5f3b4382e%7C995b093648d640e5a31ebf689ec9446f%7C0%7C0%7C636682877726559330&sdata=y75OGm%2Fhrs%2F%2FS0zwqr4c2F2yaTxRfNC5ciMOnyT4WKQ%3D&reserved=0>.

**********
Participation and subscription information for this EDUCAUSE Constituent Group 
discussion list can be found at http://www.educause.edu/discuss.

Reply via email to