switch access policy

[JayBhavsar22320]

We have OKTA Radius agent as our Radius server. I have been trying to use that as switch access policy but can't make it work. I am just tired with trying. Is there any other way to restrict switch port access with easy way ?

[inderdeepsingh1]

@JayBhavsar22320 : Check this out

https://help.okta.com/en/prod/Content/Topics/integrations/cisco-meraki-radius-intg.htm

[JayBhavsar22320]

Hello @inderdeepsingh1 Thanks for your response. This page looks like it is only for wireless not for switches or switchport.

[inderdeepsingh1]

@JayBhavsar22320 : Check this one as well

https://community.meraki.com/t5/Switching/EAP-TTLS-or-PAP-for-Wired-Port-Security/td-p/88458

[Philip D'Ath]

I can't find a single guide on using Okta for wired 802.1x. Even Google is slim on search results.

I would check if Okta even supports doing this with Okta.

[JayBhavsar22320]

@Philip D'Ath Sure will check with Okta. What are other options in case if Okta doesn't work.

[Philip D'Ath]

You can use the RADIUS server that comes with Windows (NPS).

https://documentation.meraki.com/MS/Access_Control/Configuring_802.1X_Access_Policies_on_MS_Switches_using_Windows_2008_NPS

[JayBhavsar22320]

@Philip D'Ath That would be something not possible because we are planning to stay away from on-premise and move more towards the cloud.

[inderdeepsingh1]

@JayBhavsar22320 : Check with Jumpcloud for Radius authentication on cloud

https://jumpcloud.com/blog/cisco-meraki-radius-as-a-service

[JayBhavsar22320]

Hello, @inderdeepsingh1 Thanks for your suggestion. I agree with you but we have Okta in place already and it would be a waste of money if we go with Jumpcloud.

Is there any other way to restrict switch ports other than Radius ?

[gilesitis]

Hello sir,

I know this is an old post, but have you by chance seen any updates on this? We are looking at turning on wired 802.1x on our Meraki switches and sending RADIUS requests to Okta agent. Still having a tough time finding any documentation specifically about the wired clients. I am also wondering if the native Windows supplication is acceptable for sending credentials. Hitting a lot of speed bumps on this project. TIA if you have any advice.