Cisco Meraki
Here is a step-by-step guide on how to configure Cisco Meraki to work with VAULT.
Please refer to Cisco Meraki's documentation for additional information on how to configure VAULT with Cisco Meraki.
Configuration Steps Overview
Configure SSID.
Configure Access Control.
Configure RADIUS.
Configure Client IP and VLAN.
Configure SSID
Click on “Wireless.”
Click on “Configure -> SSID.”

Under the SSID Slot select “Enabled.”
Click “Rename” to Enter SSID Name – VAULT.

Click "Save Changes."
Configure Access Control
Click “edit settings" next to Access Control.

Under Security select “Identity PSK with RADIUS.”
Select “Easy PSK” from the drop-down list.

Wi-Fi Personal Network (WPN) – “Disabled.”
WPA encryption – “WPA2 only.”
802.11r – “Disabled.”
802.11w – “Disabled.”
Mandatory DHCP – “Disabled.”

Splash page – “Non (direct Access).”

Configure RADIUS
Under RADIUS servers click “Add Server” and enter the following information.
Host IP or FQDN – xx.xx.xx.x
Auth port – xxxx
Secret – XXXXXXX
Click “Done.”
Click “Add Server” to add a Secondary RADIUS server and enter the following information.
Host IP or FQDN – xx.xx.xx.x
Auth port – xxxx
Secret – XXXXXXX
Click “Done.”
Under RADIUS accounting servers Click “Add Server” and enter the following information.
Host IP or FQDN – xx.xx.xx.x
Acct port – xxxx
Secret –XXXXXXX
Click “Done.”
Click “Add Server” to add a Secondary RADIUS server and enter the following information.
Host IP or FQDN – xx.xx.xx.x
Acct port – xxxx
Secret – XXXXXXX
Click “Done.”
Set Accounting interim interval to “30 Minutes.”
RADIUS testing – “Disabled.”
RADIUS CoA support – “Disabled.”
RADIUS CoA support – “Disabled.”
Dashboard RADIUS proxy – “Enabled.”
Click on “Advanced RADIUS Settings.”
Set NAS ID to “Custom.”
Enter “Custom” String for NAS ID.
All other settings may be left as default or set to Best Practices.
Configure Client IP and VLAN
Under Client IP and VLAN select “External DHCP server assigned.”
Select “Bridged.”
Select “Override VLAN tag” next to RADIUS override.
Select “VLAN ID” as VLAN tagging option.
Set a DEFAULT VLAN ID (per best Practices).

Click “Save” to complete all changes.
Last updated
Was this helpful?