Security

last person joined: 3 hours ago 

Enterprise security using ClearPass Policy Management, ClearPass Security Exchange, IntroSpect, VIA, 360 Security Exchange, Extensions and Policy Enforcement Firewall (PEF).
Expand all | Collapse all

clearpass and meraki with multi vlan ssid -> help needed

  • 1.  clearpass and meraki with multi vlan ssid -> help needed

    Posted Jun 08, 2020 10:35 AM

    I need to implement the following:

     

    a single ssid on a meraki wifi system, with multiple vlans.

     

    some machines will have  a valid certificate from the corp and should be assigned a corp vlan.

     

    some machines will not have a valid certificate and will be assigned a guest vlan.

     

    some smart devices will be allowed limited access to corp ( device database)  and yet another vlan.

     

    how do I implement this in clearpass  using meraki wifi  and clearpass?

     

    ---- meraki config

    my guess is: ( ssid config in the meraki cloud)

    ssid = name 

    networks access  = enterprise with " my radius server" -> clearpass ip address .. etc.

    possibly: "assign group policy by device type" -> for smart devices

    client ip assignment = " bridge mode: make clients part on the lan"

    vlan tagging = "use vlan tagging"

     

    --- clearpass config

    service = meraki (wireless service)

    1, check certificate of device, if it is ok , assign vlan "corp"

    2. if smart-device and in database, assign vlan "smart device"

    3. default :: assign vlan "guest vlan"

     

    is this possible? and if so am I on the right track ?

     



  • 2.  RE: clearpass and meraki with multi vlan ssid -> help needed

    Posted Jun 08, 2020 11:30 AM

    Yes this can work. You need to use the "Cisco Identity Services Engine (ISE) Authentication" option on the Meraki side.

     

     



  • 3.  RE: clearpass and meraki with multi vlan ssid -> help needed

    Posted Jun 08, 2020 11:30 AM
    Yes it is possible and you are definitely on the right track

    Sent from Mail for Windows 10