MAC-based access control WITH pre-shared key

[apu]

We're deploying Meraki APs to connect to an existing FortiNAC network access control system.

We have successfully configured one SSID that faculty and students can use Enterprise authentication to enter their username & password, do an 802.1x authentication against the RADIUS server and then they are then assigned to the appropriate VLAN.

But we also have other devices that won't have a specific username to authenticate with that need to be put in different VLANs. It's not by device type -- all Android devices vs. iOS devices -- so the built-in Meraki VLAN grouping tool is not sufficient. I need the RADIUS server to pass that more granular VLAN info to Meraki. But, since there is no username to authenticate with, we want to use a pre-shared key instead.

Essentially, looking for "MAC-based access control (with encryption)" but this does not seem to be an option. Is there a workaround?

Thanks in advance!

[ww^ · Accepted solution]

Maybe you can use ipsk with radius

https://documentation.meraki.com/MR/Encryption_and_Authentication/IPSK_with_RADIUS_Authentication