Meraki RadSec Setup

Foxpass RadSec allows a RADIUS connection via TLS for an additional layer of security. This setup guide will help you configure Meraki equipment with Foxpass RadSec.

Configure Meraki

1. Download RadSec Server CA from the Foxpass RadSec page.

2. In the Meraki dashboard, go to Organization --> Certificates

3. In the top right section, click "Upload CA certificate" and upload the RadSec Server CA from Step 1.

4. In the bottom right section, click the “Download CA” button. (If the "Download CA" button isn't there, chose "Generate CA" (this might take a while) and then choose "Trust".)

4. Go to Foxpass RadSec page now. Click "Upload Customer Client CA" button.

6. Upload the Meraki CA downloaded in Step 4.

Configure SSID for RadSec

Go to Wireless > Configure > Access control. For your SSID:

• SSID (name) - Your SSID name
• SSID status - Enabled
• Enterprise with - my RADIUS server

• Wi-Fi Personal Network (WPN) - Disabled

• WPA encryption - WPA2 only

• 802.11w - Disabled

• Mandatory DHCP - Disabled

• For RADIUS servers:

  • Connection mode: Select RadSec (RADIUS over TLS). In the older dashboard, select the RadSec checkbox next to the RADIUS server instead.
  • Host IP or FQDN: Enter the FQDN shown on the RADIUS > RadSec page in your Foxpass console.
  • Auth port: 2083
  • Secret: radsec
  • Do not click Test, as it does not support RadSec.
  • Click Done, if shown, and save your changes.

  

• Now connect to your SSID.

• You can see successful/unsuccessful logs on the radius logs page.

Troubleshooting

• Make sure your MR firmware is 31.1 or higher
• Make sure Client Balancing is disabled on your Meraki dashboard.