topic Re: Reauthentication in EAP (EAP-TLS or PEAP-MSChapv2) in Wireless

Reauthentication in EAP (EAP-TLS or PEAP-MSChapv2)

alex-technergy — Sat, 25 Feb 2023 07:09:46 GMT

Hi all

In Wired dot1x, we can configure the reauthentication timer in the suppliant to reauthentication after a certain period of time, so anyone know if we can do the same in Meraki in Wireless AP with dot1x authentication? Say reauthenticate the WIFI client running EAP-TLS every 24 hours?

Best regards

Alex

Re: Reauthentication in EAP (EAP-TLS or PEAP-MSChapv2)

aleabrahao — Sat, 25 Feb 2023 10:20:06 GMT

Once the Wireless network is saved in the device, the credentials are saved, with no need for reauthentication.

The timer itself is something that is configured on the Radius server, but it is more common to apply on the wired network, I have never seen it work on wireless networks, usually, when reauthentication is required for an X period of time it is more common to use authentication via captive portal.

Re: Reauthentication in EAP (EAP-TLS or PEAP-MSChapv2)

alex-technergy — Sat, 25 Feb 2023 15:18:45 GMT

Other WIFI manufacture implemented reauthentication timer, so the AP will perform reauthentication to the client when timer expired. So we would like to know if Meraki also has this timer? or it has a default reauthentication timer?

Re: Reauthentication in EAP (EAP-TLS or PEAP-MSChapv2)

aleabrahao — Sat, 25 Feb 2023 15:46:45 GMT

You can find EAP timers on advanced Radius settings, but it does not have a reauthentication timer.

Re: Reauthentication in EAP (EAP-TLS or PEAP-MSChapv2)

alex-technergy — Sun, 26 Feb 2023 04:13:27 GMT

I checked already, but no luck, so want to see any expert here know to configure the reauthentication timer or any default value of the reauthentication in Meraki.

Re: Reauthentication in EAP (EAP-TLS or PEAP-MSChapv2)

aleabrahao — Sun, 26 Feb 2023 11:37:18 GMT

Unfortunately, It's not possible buddy. This is I'm trying to say.

Re: Reauthentication in EAP (EAP-TLS or PEAP-MSChapv2)

aleabrahao — Sun, 26 Feb 2023 11:43:13 GMT

maybe using CoA is an option. Take a look at the article.

https://documentation.meraki.com/MR/Encryption_and_Authentication/Change_of_Authorization_with_RADIUS_(CoA)_on_MR_Access_Points