Meraki Z1 & MXxxx Security Appliances with external RADIUS authentication (recommended)
- Support
SOCIFI is proud to be Cisco Meraki Technology Partner
This article applies to the following models:
MX60, MX60W, MX64, MX64W, MX80, MX100, MX400, MX600, Z1
Are you missing some options in the Meraki Dashboard? Continue here.
Tested versions:
| Model | Type | Firmware version | Description |
|---|---|---|---|
| Z1 | AP + router | Cisco does not disclose it | AP |
Intro:
If you want to use some SOCIFI features (bandwidth management, PayThru, roaming) you'll have to set external RADIUS on your Meraki controller. SOCIFI recommends to use configuration with the external RADIUS as the first choice. The following steps can slightly differ for each Meraki type, but the logic of settings is the same. Settings for Meraki Z1 and Meraki MR12 follows.
Note: The configuration without RADIUS authentication can be found here: Meraki without external RADIUS authentication.
1. Log into Meraki Dashboard
2. RADIUS server setting
We recommend to use this set of RADIUS servers:
Select Teleworker gateway (or Security appliance) > Access control. On the Network access page in the Splash page section please check Sign-on with and pick "my RADIUS server". In the RADIUS for splash page section please add the Primary RADIUS server first and then Secondary as follows:
| Host | < name > (e.g. rad-1-euw-1.socifi.com) |
|---|---|
| Port | 1812 |
| Secret | socifi |
Note: the port 1813 for accounting is created automatically
Pages related to RADIUS issues
Running Radius test on Cisco Meraki
In the Failover Policy section select "Deny Access" and in the Network access control section select "Disabled: do not check clients for antivirus software"
3. Walled garden ranges setting
Select Walled garden > set Walled garden is enabled
Enter following Walled garden ranges:
If you are a customer with the White Label solution, please add your custom domain (for example *.mycustomdomain.com) to the Walled Garden list.
*.socifi.com *.facebook.com *.akamaihd.net *.akamai.net *.edgecastcdn.net twitter.com *.twitter.com *.twimg.com *.fastly.net *.li-cdn.net *.cloudfront.net facebook.com *.fbcdn.net *.instagram.com *.cdninstagram.com instagram.com *.linkedin.com *.licdn.com linkedin.com
facebook.com and twitter.com (Yes, twice. Once with and once without the asterisk)
Pages related to Walled Garden issues
Set the following values:
| Captive portal strength | Block all access until sign-on is complete |
|---|---|
| Walled garden | Walled garden is enabled |
| Walled garden ranges | < copy from the list above> |
| Simultaneous logins | Allow simultaneous device per user |
| Controller disconection behavior | Default for your settings |
4. Splash page Setup
Go to Teleworker gateway (or Security appliance) > Splash page and select Custom splash URL then enter: http://connect.socifi.com
5. Get the MAC address you'll need later for the SOCIFI dashboard administration
Go to Teleworker gateway (or Security appliance) > Appliance status The MAC address is on top (as pictured)
6. Add a new hotspot to SOCIFI Dashboard
Dashboard WiFi vendor setting
For the Dashboard administration, you'll need to know the MAC address of the Meraki device. As the Wifi vendor it the Hardware tab please Cisco Meraki (radius)
Step 1: Login to SOCIFI Dashboard
Step 2: Click on the "Hotspots" tab on the left sidebar
Step 3: Click on the “Add a new hotspot” button located on the top right corner on the screen (pictured below)
Note: A pop-up window will appear (below)
Step 4: Select the Wi-Fi hardware manufacturer from the drop down menu
Step 5: Enter the serial number or MAC address (depending on the specific equipment manual) of your equipment. You can add multiple hotspots at once.
Step 6: Set your Network location (this step is essential for correct ad targeting)
Step 7: In the pop-up window type your location or just move the marker on the map and click on the save button to confirm the selection. This address is used for ad GEO targeting.
Step 7: Click Save
Note: Newly added hotspot are marked as 
(Hotspot pending). After the first user connects to the hotspot via SOCIFI, the status will automatically change and appear as 
(Active) within an hour. Get your first connections to test if it works properly.
