network access on wireless

[cghaderpour]

we are planning to move from network access with pre-shared key to wpa-enterprise with meraki cloud authentication across a midsize company. I would like to get some guidance if someone has already done this.

TY

[kYutobi]

If should be really easy to setup if you're using Meraki for authentication and creating your user logins. I would just test it really quick by creating an SSID (hidden) if it's just you. Then try it there with a created user.

[aleabrahao]

Hi,

Here is all that you need to know.

https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring__WPA2-Enterprise_with_Meraki_Authentication

[Philip D'Ath]

Meraki authentication may be challenging to maintain at the scale of a "mid-size" company.

Also check out the "Trusted Access" feature - but note this needs a Systems Manager licence for every user.
https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Trusted_Access_for_Secure_Wireless_Connectivity

[kYutobi]

Just curious @Philip D'Ath because I'm trying to guess your number 😁 "mid-size". Where would you stop scaling through Meraki authentication? I've usually done 40 but 20/20 split between networks.

[Philip D'Ath]

I was thinking of 200 to 500 employees.

Creating separate accounts with a password not linked to their other systems will result in much work constantly resetting passwords (most likely a daily service ticket to resolve). And if they have multiple devices, every time that password is reset they'll have to re-enter it on the other devices that were working but which have now broken.

I think I would use Meraki Authentication for up to 20 users. How have you found the administrative effort using this approach with 40 users?

[kYutobi]

It's not too much of a burden since it wont move up from 40 but I definitely see your point when you say 200 to 500 😳😲😲. Wouldn't even suggest 😂

[BlakeRichardson]

I manage just over 1100 users with 802.1x using a cloud based directory which works well for us.

Meraki Auth IMO would be fine for a small amount of users provided staff retention was good.