topic Meraki 802.1x authentication with Cisco ISE in Wireless

Meraki 802.1x authentication with Cisco ISE

Richard Tapp — Mon, 28 Apr 2025 10:01:58 GMT

We are currently testing Cisco ISE for 802.1x wireless authentication.

When it uses the default port 1700 on both the ISE and SSID, it fails with an ISE log message of

11052 Authentication request dropped due to unsupported port number.

I can see in Wireshark that it is being sent 1700 from the AP and the log says it is sending 1700 as well.

Oddly, if we set both sides to 1814, we don’t get a logged error message, but the test in the Meraki portal still fails.

Also I noticed the framed mtu is 1400, we normally set this to 1344 in out NPS server and was wondering if we still need to use the NPS for some functions of this authentication

Re: Meraki 802.1x authentication with Cisco ISE

aleabrahao — Mon, 28 Apr 2025 10:18:17 GMT

Here you have a detailed document on how the integration is done, I hope it helps you.

https://community.cisco.com/t5/security-knowledge-base/how-to-integrate-meraki-networks-with-ise/ta-p/3618650

Re: Meraki 802.1x authentication with Cisco ISE

aleabrahao — Mon, 28 Apr 2025 10:23:47 GMT

Another detail about port 1700 is that it is used for CoA.

See the list of ports and what they are used for.

https://www.cisco.com/c/en/us/td/docs/security/ise/3-0/install_guide/b_ise_InstallationGuide30/b_ise_InstallationGuide30_chapter_7.html

Re: Meraki 802.1x authentication with Cisco ISE

Abdulaziz Loonat — Tue, 29 Apr 2025 10:00:31 GMT

We have been using ISE to authenticate wireless and wired client for past 5 years and these are the ports set up

1812 for RADIUS

1813 for accounting

Re: Meraki 802.1x authentication with Cisco ISE

THHQ_DC — Mon, 01 Dec 2025 13:25:15 GMT

Hello Richard-Tapp,

I'm wondering if you find a fix for your issue, as we are experiencing the same error.

Radius authentication are working correctly between cisco MEraki switches and Cisco ISE, but the Meraki test is failing and throws unexpected error messages.

Did you find something on your side ?

Regads.

Re: Meraki 802.1x authentication with Cisco ISE

Abdulaziz Loonat — Thu, 04 Dec 2025 16:19:20 GMT

The test connection to the RADIUS server has never worked for me, yet RADIUS authentication from the AP the RADIUS servers is working as intended

We are using ISE 3.2