Meraki AP and RADIUS integration

This video covers how to integrate the Meraki platform to a Windows-based RADIUS server and then assign users to different VLANs based on their AD groups.

My virtual training:

[onyemaedeh]

This video was 7 years ago but solved my problem today. Thank you

[GoodGameOKC]

2020 and this video was excellent. Thanks for sharing your knowledge.

[aliabdulrazaq]

Thanks for the great video, I was looking into the issue with fortigate and you made it easy for me bro

[alfredocole]

Awesome explanation. Very clear and very detailed. Much appeciated.

[windogwow]

This is the best step by step Meraki video I have ever found online. Great job!
Just wondering if you have figured out a way to do a captive portal while keep the RADIUS private - away from public Internet?

[manishkct]

This is really an awesome explanation, Appreciated ..

[EdgarEstrada-vhhz]

Excellent Video!! Quick question, though: If my RADIUS is bahind my meraki, and not on the WAN.... how can I connect to the Radius? It's not working ... :(

[mrphe-]

When I configure the Server Radius.
IN the Server Radius: I only need to add the IP of the meraki dashboard and its SECRET Key, or do I need to add to All the access points and their IP addresses each one with th

[jimmyhuang]

This video is exellent, thank you Fady!

[Mubarak]

Do we need to configure trunk or access port between access switch and Access Point

[DennisVillarreal]

I noticed something, you used public ip addresses when you created your VLANs, my question is this one, In a real scenario you can't use public ip ranges as your vlans, is that correct?

[jamesjiang]

Hi Fady,

This is an excellent video, thank you. we have a situation here, we are trying to separate the Guest wifie within the DMZ zone with the corporate network, which is not a problem with the APs concentrate back to the DMZ zone, but we also want the guest wifi authenticate with our ISE server, and looks like the MX as a concentrator doesn't support the ISE, Do you have experience on this? and if we keep the old cisco APs co-existing with Meraki APs, are they will interfering each other even with differient SSID>?

[AA-oogy]

What about if you have 50 access points? Do you need to add each one of them as a Radius client?

[scott]

Do the switch ports that the AP's are connected to need to be configured as trunks to carry the 3 vlans? I understand the switch port to the router needs to be trunked

[bootcd]

Hi it is mandatory for this configuration create a Server CA ? I think when you set up 8021x in Meraki is mandatary to have a CA server

[sorrawitpawawijan]

How to configure to use Windows DHCP server to providing IP client by different VLAN for each company ?

[STANLEY]

Hello, I have followed your video to setup the clients in NPS and the radius server settings in the Meraki dashboard, but when I test all the access points fail. I can ping the NPS server from the AP and we previously had setup a radius server for our VPN authentication and that works. Any thoughts why the APs are failing?

[colinhiggins]

Fady: for Windows-based wireless clients, do they need to be running the Cisco Network Access Client/Anyconnect, etc. for this to work? Or will the user simply be presented with a standard login without need of additional software?

[x]

Thank you Fady! Great video.

Just a question, when I trying to test my connectivity. All APs failed, and no Radius attribute used.

Any idea?

Thank you!

[OTTSENS]

Hi Fady, This is a great video and got me up and running.I am extremely new to RADIUS and Meraki AP..I can successfully connect to my radius server via Meraki and I can even take a laptop, connect to my wireless network and get authenticated against the RADIUS server.My problem is I am not getting an IP address.I am a little lost and not where to go.. I am assuming I need to set a policy on the RADIUS server to give me an IP address.  We use a windows DC with DHCP to give out our IP in our environment and I would like to create a policy is RADIUS to point this DHCP scope and hand out IPs.. I cant seem to find this setting and if I am even on the right track.
Any advise is greatly appreciated.Thanks
Jason