topic Raj, did you get this to work in Network Access Control

ISE with Meraki MX-80 - GUEST access

Rajagopal Sivaramakrishnan — Mon, 11 Mar 2019 05:56:33 GMT

Has anyone worked with Meraki splash page , getting forwarded to ISE for guest authentication ? Im very new to ISE, and we setup something basic.. We get the Guest login splash page, and the guest can go and do a self-register. Once he sends self-register, it emails to sponsor, and sponsor accepts the request. Guest gets a username/pw, which he is able to authenticate.. but once authenticated, when I type any internet website, it asks for authentication again ! and it keeps looping.

Any help appreciated.

I know when I looked at

phosawyer — Fri, 31 Jul 2015 14:01:42 GMT

I know when I looked at Meraki switches, they did not support CoA which is required. I can only assume neither do the APs and that is why you are hitting this?

The obvious answer is to use the Meraki guest login. Works a treat for us

Did you follow the

jan.nielsen — Sat, 01 Aug 2015 10:57:58 GMT

Did you follow the instruction here? : https://www.cisco.com/c/dam/en/us/td/docs/security/ise/how_to/HowTo-86-Integrating_Meraki_Networks.pdf

I think its just the way

Rajagopal Sivaramakrishnan — Mon, 10 Aug 2015 19:53:01 GMT

I think its just the way meraki sends radius packets, encapsulated within SSL, and through the cloud. It works great if the splash page is local to Meraki, and sends a radius request to ISE. , but if the splash page is from ISE, with a redirection URL in meraki, we are still not able to make it work.

Regards

Raj

Jan, have you done such

nspasov — Thu, 17 Mar 2016 22:02:15 GMT

Jan, have you done such deployment before? I have a customer now that is looking to get Sponsored based ISE guest with their Meraki wireless. The link that you provided that this is possible via LWA (not ideal but the only option since CoA is not available on Meraki).

Raj, did you get this to work

nspasov — Thu, 17 Mar 2016 22:02:34 GMT

Raj, did you get this to work?

Not yet no, most customers we

jan.nielsen — Thu, 17 Mar 2016 22:17:21 GMT

Not yet no, most customers we sell Meraki to, don't have ISE. I have not seen anything indicating that meraki has gotten more ISE support like CWA/CoA.

I am in the same boat...don't

nspasov — Thu, 17 Mar 2016 22:24:21 GMT

I am in the same boat...don't sell Meraki and ISE together...but every once in a while we get a customer that already has purchased ISE 🙂 Thanks for the reply! (+5 from me)