topic Re: Wireless Authentication in Wireless

Wireless Authentication

piasterloo — Thu, 13 Mar 2025 11:12:34 GMT

Folks ,

Our WAPs are set up on the Management VLAN 50, while the wireless users obtain their IP addresses from VLAN 80. Authentication is managed through a RADIUS server. Is it essential to enable inter-VLAN communication between VLAN 50 and VLAN 80 for successful authentication?

Please advise and thanks

Re: Wireless Authentication

michalc1 — Thu, 13 Mar 2025 11:24:46 GMT

Which VLAN is the RADIUS server on?

If VLAN 50 - no need for interVLAN

If other than VLAN50 - yes for interVLAN need.

There is also an option for alternate MGMT interface if needed.

Re: Wireless Authentication

ww^ — Thu, 13 Mar 2025 11:28:20 GMT

You only need connectivity between the management ip and the radius

Re: Wireless Authentication

piasterloo — Thu, 13 Mar 2025 11:29:45 GMT

radius server is not on prem...its hosted in the DC

Re: Wireless Authentication

DHAnderson — Thu, 13 Mar 2025 17:52:51 GMT

We have most of our clients using RADIUS for WiFi Authentication. The access points are on a management VLAN and the clients are on a different VLAN. No inter-VLAN traffic is allowed, and authentication works fine.

Re: Wireless Authentication

BlakeRichardson — Thu, 13 Mar 2025 18:39:15 GMT

This documentation has a great image showing how the process works.

https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_RADIUS_Authentication_with_WPA2-Enterprise

So as long as your client can access the AP and the AP itself can access the Radius server you are all good.