I have a couple of Meraki MX64W devices talking back to campus for authentication and can successfully broadcast eduroam. I defined the management subnet of the Meraki devices in my RADIUS auth system, assigned a shared secret, and it works pretty well. I even have a Cisco wireless voip phone working on it.
With the MX devices, however, they do not seem capable of assigning VLANs based on radius response, so I cannot put users from other institutions on a DMZ – anyone who auths successfully gets bridged into the same VLAN. I read that the MR access points do have this capability. -- Bryan Ward Network Engineer Dartmouth College Network Services 603-646-2245 bryan.w...@dartmouth.edu<mailto:bryan.w...@dartmouth.edu> From: The EDUCAUSE Wireless Issues Constituent Group Listserv <WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU> On Behalf Of Christina Klam Sent: Friday, July 27, 2018 7:29 AM To: WIRELESS-LAN@LISTSERV.EDUCAUSE.EDU Subject: Re: [WIRELESS-LAN] Meraki AP connectivity to eduroam Listening with great anticipation. We are hoping to get eduroam up and running at our remote sites — which both use Meraki. As we are not using the wireless concentrator option in Meraki, we have listed every AP in our clients file. This may be fine for now but will be burdensome if we expand our use Meraki. Regards Christina Sent from my iPhone On Jul 27, 2018, at 05:16, Mike Atkins <matk...@nd.edu<mailto:matk...@nd.edu>> wrote: Our radius admin would define the management subnet of the Meraki APs in our radius server configuration. ---Mike Atkins sent from phone On Jul 27, 2018, at 3:21 AM, Mark McNeil [Staff] <mcn...@fordham.edu<mailto:mcn...@fordham.edu>> wrote: Hi everyone, I'm wondering if someone can provide a little clarity on configuring Meraki to connect to eduroam. The documentation states that " The MR's will need to be defined on the RADIUS server as RADIUS clients (consult RADIUS server documentation to complete this step). " I take this to mean that I will need to define all my AP's, in my case MR42's, in my local RADIUS. Is this correct or is there another way around this on the Meraki. I only have 33 AP's but seems there should be another way. Any help is appreciated. Thanks Mark -- ________________________________________________________________________ Mark McNeil Director, Network Engineering and Operations Fordham University | Fordham IT Tel: 718-817-3763 Business Office: 718-817-3750 Fax: 718-817-5775 email: mcn...@fordham.edu<mailto:mcn...@fordham.edu> <https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.fordham.edu%2F&data=02%7C01%7Cbryan.ward%40DARTMOUTH.EDU%7C9d81cf1050344d277c4408d5f3b4382e%7C995b093648d640e5a31ebf689ec9446f%7C0%7C0%7C636682877726529301&sdata=RLDIT3NiCNmWwZph8pA9GRzH%2FVYFAQNCm8tEpJiJrWU%3D&reserved=0> http://www.fordham.edu<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.fordham.edu%2F&data=02%7C01%7Cbryan.ward%40DARTMOUTH.EDU%7C9d81cf1050344d277c4408d5f3b4382e%7C995b093648d640e5a31ebf689ec9446f%7C0%7C0%7C636682877726539317&sdata=3EgkrTjr%2FrwnTkHRCopplF8PTreykTQvioyAR4utS2I%3D&reserved=0> _____________________________________ ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.educause.edu%2Fdiscuss&data=02%7C01%7Cbryan.ward%40DARTMOUTH.EDU%7C9d81cf1050344d277c4408d5f3b4382e%7C995b093648d640e5a31ebf689ec9446f%7C0%7C0%7C636682877726549322&sdata=drrQ8mRf6br7aeFCP2bi%2FyDS0Wz5G1EhhiA6RT802eY%3D&reserved=0>. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.educause.edu%2Fdiscuss&data=02%7C01%7Cbryan.ward%40DARTMOUTH.EDU%7C9d81cf1050344d277c4408d5f3b4382e%7C995b093648d640e5a31ebf689ec9446f%7C0%7C0%7C636682877726549322&sdata=drrQ8mRf6br7aeFCP2bi%2FyDS0Wz5G1EhhiA6RT802eY%3D&reserved=0>. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss<https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.educause.edu%2Fdiscuss&data=02%7C01%7Cbryan.ward%40DARTMOUTH.EDU%7C9d81cf1050344d277c4408d5f3b4382e%7C995b093648d640e5a31ebf689ec9446f%7C0%7C0%7C636682877726559330&sdata=y75OGm%2Fhrs%2F%2FS0zwqr4c2F2yaTxRfNC5ciMOnyT4WKQ%3D&reserved=0>. ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/discuss.