topic Re: Need Help - Cisco ISE 2.3 & Meraki MR42 BYOD in Network Access Control

Need Help - Cisco ISE 2.3 & Meraki MR42 BYOD

vijaydabasia — Wed, 25 Oct 2017 16:01:14 GMT

Hi All,

I have Meraki MR42 configured for BYOD SSID which points to our Cisco ISE server. Connection from Meraki to ISE works as i've already tested 802.1x authentication with LDAP for laptops on WiFi.

I have followed various configuration guide to setup BYOD for employees and struggling to get it working I can't use the wizard as i'm not using WLC. I have got to a stage where i'm getting "15052 Authorization profile/s specified are not suited for this Network Access Device" if tried Andriod and iPhone with the same result.

See attached RADIUS Log - PDF

Authentication Policy:

What am I missing?

Thanks

Re: Need Help - Cisco ISE 2.3 & Meraki MR42 BYOD

Timothy Abbott — Wed, 25 Oct 2017 16:53:02 GMT

You have a BYOD SGT applied. Meraki does not support TrustSec currently. Try removing the SGT.

Regards,

-Tim

Re: Need Help - Cisco ISE 2.3 & Meraki MR42 BYOD

vijaydabasia — Thu, 26 Oct 2017 08:37:09 GMT

Hi Tim,

I have removed the SG from the Authentication policy but still get the same result.

Re: Need Help - Cisco ISE 2.3 & Meraki MR42 BYOD

Jason Kunst — Fri, 27 Oct 2017 12:21:26 GMT

Make sure under your NAD profile you’re using Cisco as it’s treated the same as cisco wlc

Re: Need Help - Cisco ISE 2.3 & Meraki MR42 BYOD

hslai — Wed, 08 Nov 2017 05:01:32 GMT

See what smashash responded @ Can i have step by step guide to Integrate Hp5500 Switch with Cisco ISE 2.2 using mab