Get the strength and security of RADIUS without building, maintaining, or monitoring physical servers. It’s also quick to roll out managed RADIUS to your organization to authenticate users to Wi-Fi, VPNs, switches, and network devices securely. This is a full walkthrough of configuring JumpCloud's RADIUS-as-a-Service (RaaS) and a Meraki Wireless Access Point (WAP).
Settings and Configuration Notes
- Encryption/Authentication Mode: WPA2 Enterprise.
- Server IP Addresses: For current RADIUS server IPs, see Configure a WAP, VPN, or Router for RADIUS.
- RADIUS Port(s): 1812/UDP (accounting port 1813 is not supported).
- Shared Secret: The Shared Secret is created by performing the steps in RADIUS Configuration and Authentication.
To view the Shared Secret:
- Log in to your Admin Portal: https://console.jumpcloud.com/.
- Click RADIUS.
- Click edit on the RADIUS server created.
- The Shared Secret field will be displayed to the right, and you can click the eye icon to make the characters visible.
When changing the Host IP of the RADIUS server in the Meraki configuration, you must also re-input the secret for that record. If you do not, the new setting may fail.
The following steps describe the process to configure the Meraki configuration. They are accurate as of 8/11/2016. If a discrepancy is found, contact JumpCloud Support.
- Navigate to https://meraki.cisco.com/.
- Click Log In.
- Enter your your Meraki administrator username and password.
- Click Configure and select SSIDs.
- Find an open SSID in a disabled state. You may need to click Show all my SSIDs for visibility.
- Click edit settings. This will will take you to the Access control tab for the SSID from Step 4.
- Set the Association requirements to WPA2-Enterprise with the name of the SSID created in Step 5.
- Set the WPA encryption mode to WPA2 only.
When using the EAP-TTLS/PAP protocol, the Test button will not test correctly, but you can test from your workstation after configuring the certificates.
- Scroll to RADIUS servers, and click Add a server. JumpCloud recommends that you add both RADIUS server IPs for redundancy.
- Enter the RADIUS server IP. Refer to Configure a WAP, VPN, or Router for RADIUS for a list of JumpCloud’s current server IP addresses.
- Your configuration is complete.