Secure Cisco Meraki Wireless with ISE

Presented by Thomas Howard, Cisco ISE TME
00:00 Intro & Agenda
00:42 ISE Compatibility (RADIUS & TACACS protocols)
01:12 Meraki Hardware & Software Capabilities
01:58 Endpoint Authentication and Trust
02:55 Authenticaiton & Network Access Security is a Spectrum
06:25 Meraki Dashboard
07:29 SSIDs and Access Control Options
08:40 Methods for Securing Meraki Wireless with ISE
09:47 MAC Authentication Bypass (MAB)
11:36 Meraki RADIUS Authentication Test
11:56 Demo: Meraki Dashboard SSIDs for Open Hotspot and ISE Configuration Overview
19:28 Centralized Web Authentication (CWA) with ISE vs Meraki Splash Page
22:50 Demo: Guest HotSpot WebAuth with Acceptable User Policy using GuestEndpoints Group Filtering
28:00 Pre-Shared Keys in Meraki (but not with ISE)
29:53 Enable iPSK in Meraki with ISE
30:16 Meraki Config Updates may take several minutes sometimes!
31:43 Identity PSK (iPSK) and RADIUS:Tunnel-Password(69)
32:45 Demo: iPSK for IOT Devices, IOT_WiFi Policy, and Authorization Profiles
41:24 IEEE 802.1X Overview
43:06 Certificate Authentication Profile (CAP) for certificate authentication
43:23 Endpoint Supplication Provisioning
44:21 Meraki Systems Manager (SM)
44:29 Demo: 802.1X with corp SSID and ISE Configuration
46:35 Demo: 802.1X Username+Password
47:32 Demo: Meraki System Manager Payload for corp SSID and digital certificate
52:30 ISE Webinars and Resources
53:49 Q&A - What was the ACL name that the Meraki products use?
- Register for upcoming ISE Webinars @ cs.co/ise-webinars
- ISE Resources : cs.co/ise-resources
- ISE Community : cs.co/ise-community
- ISE Integration Guides : cs.co/ise-guides
- ISE Compatibility : cs.co/ise-compatibility
- ISE Webinars : cs.co/ise-webinars
- ISE TH-cam Channel : cs.co/ise-videos
- ISE Licensing & Evaluations : cs.co/ise-licensing
- Network Access Device Capabilities : cs.co/nad-capabilities
- Does ISE Support My Network Access Device? : cs.co/ise-my-nads