topic Re: Meraki Local Authentication - MR 802.1X in Wireless

Meraki Local Authentication - MR 802.1X

ajtsystems — Sat, 16 Sep 2023 12:03:15 GMT

I've been reading this article https://documentation.meraki.com/MR/Encryption_and_Authentication/Meraki_Local_Authentication_-_MR_802.1X

Which says that Meraki MR Local Auth can authenticate user certificates but I need to know if it can authenticate Machine certificates in the same way?

I'm trying to remove the requirement for a RADIUS server, which this looks like it does by running RADIUS locally on the MR.

Thanks

Re: Meraki Local Authentication - MR 802.1X

aleabrahao — Sat, 16 Sep 2023 12:48:03 GMT

As far as I know, user-level authentication is only possible with local authentication.

Basically what the AP does is store user information in cache and thus it can maintain authentication in case of communication failure with the LDAP server.

Re: Meraki Local Authentication - MR 802.1X

Karsten Iwen — Sat, 16 Sep 2023 14:24:49 GMT

I would expect it to work. Basically both User- and Machine certificates are the same. They are just used and stored differently. And the CN/SAN holds a valid username in one case and a domain-machine in the other.

Re: Meraki Local Authentication - MR 802.1X

Philip D'Ath — Mon, 18 Sep 2023 07:27:52 GMT

For local certificate authenticate, you upload a root CA certificate. The MR will alow anything to authenticate that uses a certificate from that root CA certificate.

It doesn't matter if it is a user or a machine.