MAC address authentication with pre-shared key

rmothers5150 · ‎07-05-2023

Hello,

Has anyone set up MAC authentication with a pre-share key? I only see MAC authentication or Password not a selection for both.

Thanks in advanced.

Rodney

aleabrahao · ‎07-05-2023

Instead of it, why don't you use a iPSK without Radius server?

https://documentation.meraki.com/MR/Encryption_and_Authentication/Wireless_Encryption_and_Authentication_Overview#Identity_PSK_without_RADIUS

I am not a Cisco employee. My suggestions are based on documentation of Meraki best practices and day-to-day experience.

Please, if this post was useful, leave your kudos and mark it as solved.

BlakeRichardson · ‎07-05-2023

@rmothers5150 MAC Auth with PSK is not a supported option sorry. Why it's not supported I have no idea but I know other vendors support it. Yes MAC can be spoofed but IMO it should be up to the network admin to choose work works best for them.

If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.

Karsten Iwen · ‎07-05-2023

iPSK with RADIUS is basically PSK with Mac filtering. You just have to return a Tunnel-Password.

--
If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.

BlakeRichardson · ‎07-05-2023

Yes but I am thinking about those small businesses who might not have a radius server. If you can enable MAC filtering on a MS switch port then why isn't it supported on wireless?

If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.

Karsten Iwen · ‎07-05-2023

That's a very good question. Would be a perfect task for "a cloud".

--
If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.