# Cisco Meraki
Please refer to [Cisco Meraki's documentation](https://documentation.meraki.com/MR/Encryption_and_Authentication/IPSK_with_RADIUS_Authentication) for additional information on how to configure VAULT with Cisco Meraki.
### **Configuration Steps Overview**
1. Configure SSID.
2. Configure Access Control.
3. Configure RADIUS.
4. Configure Client IP and VLAN.
### **Configure SSID**
1. Click on “Wireless.”
2. Click on “Configure -> SSID.”
3. Under the SSID Slot select “Enabled.”
4. Click “Rename” to Enter SSID Name – VAULT.
5. Click "Save Changes."
### **Configure Access Control**
1. Click “edit settings" next to Access Control.
2. Under Security select “Identity PSK with RADIUS.”
3. Select “Easy PSK” from the drop-down list.
4. Wi-Fi Personal Network (WPN) – “Disabled.”
5. WPA encryption – “WPA2 only.”
6. 802.11r – “Disabled.”
7. 802.11w – “Disabled.”
8. Mandatory DHCP – “Disabled.”
9. Splash page – “Non (direct Access).”
### **Configure RADIUS**
1. Under RADIUS servers click “Add Server” and enter the following information.
1. Host IP or FQDN – xx.xx.xx.x
2. Auth port – xxxx
3. Secret – XXXXXXX
2. Click “Done.”
3. Click “Add Server” to add a Secondary RADIUS server and enter the following information.
1. Host IP or FQDN – xx.xx.xx.x
2. Auth port – xxxx
3. Secret – XXXXXXX
4. Click “Done.”
5. Under RADIUS accounting servers Click “Add Server” and enter the following information.
1. Host IP or FQDN – xx.xx.xx.x
2. Acct port – xxxx
3. Secret –XXXXXXX
6. Click “Done.”
7. Click “Add Server” to add a Secondary RADIUS server and enter the following information.
1. Host IP or FQDN – xx.xx.xx.x
2. Acct port – xxxx
3. Secret – XXXXXXX
8. Click “Done.”
9. Set Accounting interim interval to “30 Minutes.”
10. RADIUS testing – “Disabled.”
11. RADIUS CoA support – “Disabled.”
12. RADIUS CoA support – “Disabled.”
13. Dashboard RADIUS proxy – “Enabled.”
14. Click on “Advanced RADIUS Settings.”
15. Set NAS ID to “Custom.”
16. Enter “Custom” String for NAS ID.
17. All other settings may be left as default or set to Best Practices.
### **Configure** Client IP and VLAN
1. Under Client IP and VLAN select “External DHCP server assigned.”
2. Select “Bridged.”
3. Select “Override VLAN tag” next to RADIUS override.
4. Select “VLAN ID” as VLAN tagging option.
5. Set a DEFAULT VLAN ID (per best Practices).
6. Click “Save” to complete all changes.
---
# Agent Instructions: Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.
Perform an HTTP GET request on the current page URL with the `ask` query parameter:
```
GET https://docs.roamingiq.com/network-equipment/access-point-configuration-guides/cisco-meraki.md?ask=
```
The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
