ISE guest access with Meraki Wireless

[vgurjale]

Is it possible to integrate ISE with Meraki MR for wireless guest access using SMS as a method to deliver user credentials? Anyone tested this before? What are the gotchas and best practices?

[Charlie Moreton · Accepted solution]

Yes, you can do this.  Here is a guide (though a bit dated, still quite relevant):

How To: Integrate Meraki Networks with ISE

The three biggest things to remember are:

• Meraki uses Group Policies to assign ACLs.  Configure the Group Policy in Systems Manager then reference it in ISE to apply it to the RADIUS sessions
• Change the RADIUS attribute specifying group policy name to Airespace-ACL-Name
• Enable the Walled Garden and place ISE in it (the IPs of your PSNs)

[Jason Kunst]

Here are some other docs as well

https://communities.cisco.com/docs/DOC-64018#jive_content_id_Meraki_How_To_and_Video

o https://communities.cisco.com/docs/DOC-67264

o This script is used for providing guests direct access to self-registration page.

§ For a kiosk that might be in a lobby

§ guest flow is usually going to create an account first (and not needing the login page)

§ Meraki LWA where they want to link customer directly to self-reg portal from the splash page