topic Re: Cisco Meraki MR Access Point Internal Supplicant for Wired 802.1X/ISE Integration in Wireless

Cisco Meraki MR Access Point Internal Supplicant for Wired 802.1X/ISE Integration

jordanburnett — Mon, 05 Jul 2021 17:27:15 GMT

Hey guys,

Does anyone happen to know if Meraki MR access points support submitting credentials to the connected switchport via EAP/802.1X so that the AP itself can authenticate to ISE?

I know that traditional LWAPs from Cisco support this (see:https://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-fixed/107946-LAP-802-1x.html) but I can't seem to find any documentation on whether or not Cisco Meraki MR APs support this.

The backup option is to use profiling based on CDP/OUI information, but I would prefer an actual 802.1X authentication.

Thanks in advance!

Re: Cisco Meraki MR Access Point Internal Supplicant for Wired 802.1X/ISE Integration

patoberli — Mon, 27 May 2019 09:11:49 GMT

Not sure if that is possible.
I only found this document, which contains "Wired 802.1x", but I'm not sure if that really helps:
https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_RADIUS_Authentication_with_WPA2-Enterprise

Re: Cisco Meraki MR Access Point Internal Supplicant for Wired 802.1X/ISE Integration

jordanburnett — Wed, 29 May 2019 17:16:45 GMT

Hey there,

Yeah, that's actually just for WPA2 Enterprise AKA enabling 802.1X on the wireless side. I simply need to know if it's possible to configure the Meraki AP itself to run a supplicant for it's built-in wired adapter. Based on everything I've seen so far, it doesn't appear that it's possible.

Re: Cisco Meraki MR Access Point Internal Supplicant for Wired 802.1X/ISE Integration

patoberli — Fri, 31 May 2019 14:11:56 GMT

Doesn't look like it. I suggest you contact directly Meraki support, they typically answer very fast to emails.

Re: Cisco Meraki MR Access Point Internal Supplicant for Wired 802.1X/ISE Integration

Ambuj M — Fri, 31 May 2019 16:18:37 GMT

Also try posting on Meraki community, I know you are looking for something else but MAB is always your option along with profiling.

Re: Cisco Meraki MR Access Point Internal Supplicant for Wired 802.1X/ISE Integration

jordanburnett — Wed, 26 Jun 2019 18:21:08 GMT

Good idea. I'll see if Meraki Support can give me any insight.