Secure Cisco Meraki Wireless with ISE

Presented by Thomas Howard, Cisco ISE TME 00:00 Intro & Agenda 00:42 ISE Compatibility (RADIUS & TACACS protocols) 01:12 Meraki Hardware & Software Capabilities 01:58 Endpoint Authentication and Trust 02:55 Authenticaiton & Network Access Security is a Spectrum 06:25 Meraki Dashboard 07:29 SSIDs and Access Control Options 08:40 Methods for Securing Meraki Wireless with ISE 09:47 MAC Authentication Bypass (MAB) 11:36 Meraki RADIUS Authentication Test 11:56 Demo: Meraki Dashboard SSIDs for Open Hotspot and ISE Configuration Overview 19:28 Centralized Web Authentication (CWA) with ISE vs Meraki Splash Page 22:50 Demo: Guest HotSpot WebAuth with Acceptable User Policy using GuestEndpoints Group Filtering 28:00 Pre-Shared Keys in Meraki (but not with ISE) 29:53 Enable iPSK in Meraki with ISE 30:16 Meraki Config Updates may take several minutes sometimes! 31:43 Identity PSK (iPSK) and RADIUS:Tunnel-Password(69) 32:45 Demo: iPSK for IOT Devices, IOT_WiFi Policy, and Authorization Profiles 41:24 IEEE 802.1X Overview 43:06 Certificate Authentication Profile (CAP) for certificate authentication 43:23 Endpoint Supplication Provisioning 44:21 Meraki Systems Manager (SM) 44:29 Demo: 802.1X with corp SSID and ISE Configuration 46:35 Demo: 802.1X Username+Password 47:32 Demo: Meraki System Manager Payload for corp SSID and digital certificate 52:30 ISE Webinars and Resources 53:49 Q&A - What was the ACL name that the Meraki products use? Register for upcoming ISE Webinars @ https://cs.co/ise-webinars ISE Resources : https://cs.co/ise-resources ISE Community : https://cs.co/ise-community ISE Integration Guides : https://cs.co/ise-guides ISE Compatibility : https://cs.co/ise-compatibility ISE Webinars : https://cs.co/ise-webinars ISE YouTube Channel : https://cs.co/ise-videos ISE Licensing & Evaluations : https://cs.co/ise-licensing Network Access Device Capabilities : https://cs.co/nad-capabilities Does ISE Support My Network Access Device? : http://cs.co/ise-my-nads