Access Point Meraki and SBR radius

[AngeOlivierAmbe]

Hello All,

Anyone have made a authentication btw AP Meraki and AM 8.2 in radius mode ? i make the test but authentication not works because AM not supporte CHAP.

any workaround ?

Thanks for your help

[JayGuillette · Accepted solution]

According to Frank "the RADIUS guy" Miller here in Support:

The Meraki is using 802.1X (EAP) to authenticate users. The method requested is PEAP and MS-CHAPv2. MS-CHAPv2 is not supported by the AM 8.1 Radius server. The only inner EAP protocols supported by the AM 8.1 Radius server are RSA-EAP, RSA-OTP and EAP-GTC.  The 2 RSA protocols were discontinued after windows 7. To use EAP-GTC you would have to find a supplicant that supports it.

A possible fix for this would be to use a Cisco ACS server as the radius server, with the AM 8.1 server configured as an external authentication server on the ACS. The ACS authenticating to the AM 8.1 server is a common configuration. You will need to contact Cisco for further information on integrating the Meraki gateway with the Cisco ACS.

[AngeOlivierAmbe]

Thanks Jay.

Ange.