Options for active directory connection

[Marsrock2021]

We have been testing users using AD integration on WiFi for work devices but it's max is 24 hours.

This isn't much use having users log in each day.

Any way around this or to increase the time.

Also any way to stop users logging in to this on a device that's not in AD as well.

Lastly the splash screen doesn't show successful log in. It does log in but you get no message to say that. Is this normal.

[Philip D'Ath · Accepted solution]

Use WPA2-Enterprise instead of splash login.

https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_RADIUS_Authentication_with_WPA2-Enterprise

If you only want AD members to connect then use certificate-based authentication.

https://documentation.meraki.com/MR/Encryption_and_Authentication/RADIUS%3A_WPA2-Enterprise_With_EAP-TLS_Using_Microsoft_NPS

I'll warn you - this is quite a bit of work. If you haven't done it before it will be worth paying someone to "come in" and set it up.

[Marsrock2021]

Thanks for that.

Had a radius setup before so must see about setting that up.

The AD setup in meraki seems a bit pointless.