topic Re: Blocking laptops from SSID-Mobile in Wireless

Blocking laptops from SSID-Mobile

DidierPierco04692 — Wed, 15 Jun 2022 09:26:36 GMT

Hi,

I did try to look for some answers but it seems my question is not answered 🙂

We have SSID-User and SSID-Mobile.

The clients should connect to wired network or to SSID-user.

Authentication is Radius based, using a security EAP method configured on the RADIUS server.

network access control via EAP-TLS as authentication protocol for devices supporting 802.1x and MAC Authentication Bypass for the rest of devices such as printers,controllers, cameras.

Now, the users sometimes manually connect to the SSID-mobile.

We would like to disallow that.

Is there a way to block laptops/PC's to a specific SSID on the Meraki ?

Thanks.

Re: Blocking laptops from SSID-Mobile

Brash — Wed, 15 Jun 2022 10:00:55 GMT

You could enable "Assign group policies by device type" on the mobile SSID and set Windows and Mac's to a blocked group policy. It won't prevent them from authenticating but it will prevent them from access to anything.

Otherwise you can look at the options in your RADIUS server. If it's something like Cisco ISE, I believe you an set policies based on OS.

Re: Blocking laptops from SSID-Mobile

chanduavirni — Fri, 10 Nov 2023 09:57:22 GMT

HI Brash

May I Solutions for Same issue in Cisco ISE Ver 2.7

Authentication is Radius based, using a security EAP method configured on the RADIUS server.

network access control via EAP-TLS as authentication protocol for devices supporting 802.1x and MAC

Thanks