topic Re: PKI solution with Meraki in Wireless

PKI solution with Meraki

Slider — Thu, 06 Feb 2020 00:21:47 GMT

Hi,

Is this doable? Connectivity to APs governed by machine ID certificates  provided Enterprise PKI solution?

Re: PKI solution with Meraki

mahensin — Thu, 06 Feb 2020 01:51:15 GMT

Answer would be a No.

More details on available encryption & Auth modes on Meraki are on this doc.

https://documentation.meraki.com/MR/Encryption_and_Authentication/Setting_a_WPA_Encryption_Mode

Interested to know what is the use case where you want to use the machine ID certs over the other options ?

Re: PKI solution with Meraki

Slider — Thu, 06 Feb 2020 17:27:19 GMT

Thank you!

Re: PKI solution with Meraki

GreenMan — Thu, 06 Feb 2020 17:37:43 GMT

Not sure I agree with your "No" here - unless I've misinterpreted something..?
If a customer is looking to have clients connect to a Meraki MR-based SSID using Enterprise 802.1x, with certificates for EAP-TLS, this is supported - but it would need an external RADIUS server to accomplish; the PKI infrastructure would need to issue appropriate certs for both the RADIUS server and all the connecting clients, establishing the necessary bi-directional chain of trust.

Meraki could also achieve something very similar, natively, through use of the new Trusted Access feature, using Systems Manager licensing: https://documentation.meraki.com/zGeneral_Administration/Cross-Platform_Content/Trusted_Access_for_Secure_Wireless_Connectivity
This is usually used for addressing Bring Your own Device (BYoD) requirements.

Re: PKI solution with Meraki

Philip D'Ath — Thu, 06 Feb 2020 19:35:52 GMT

@GreenMan is correct here.

This is a walk through guide.

https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_RADIUS_Authentication_with_WPA2-Enterprise