Configuration for Cisco Meraki

The following instructions outline how to setup a Cisco Meraki for the Smart WIFi Platform. Additional Cisco options may need to be enabled before you’re able to configure completely.

1. In Cisco Meraki Dashboard, navigate to Wireless > Configure > Access Control.
2. Select the SSID to be configured to the Smart WiFi Platform.
   

   Please do not use any apostrophes in your SSID as it will cause an issue with Authentication.

3. Association Requirements: ‘Open (No encryption)’
4. Splash Page: ‘Sign-on with ‘my RADIUS server’
5. RADIUS for splash page: 
   Host 1: Select one
   US-A Radius 1 IP

   52.23.46.139

   US-B Radius 1 IP

   3.132.31.3

   
   Port: 1812
   Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS Secret in the dashboard.
   Host 2: Select one
   US-A Radius 2 IP

   52.207.192.243

   US-B Radius 2 IP

   3.18.137.68

   
   Port: 1812
   Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS Secret in the dashboard.

6. RADIUS Accounting: ‘RADIUS accounting is enabled’
   

   NOTE: If you do NOT see this menu option then you will need to open a case with Meraki support and ask them to enable this feature for you. Simply ask, “Please enable RADIUS Accounting for this network.”

7. RADIUS accounting servers:
   Host 1: Select one
   US-A Radius 1 IP

   52.23.46.139

   US-B Radius 1 IP

   3.132.31.3

   
   Port: 1813
   Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS Secret in the dashboard.
   Host 2: Select one
   US-A Radius 2 IP

   52.207.192.243

   US-B Radius 2 IP

   3.18.137.68

   
   Port: 1813
   Secret: Available in the Edit Hotspot page in the Marketing4WiFi dashboard, called RADIUS Secret in the dashboard.
   

8. Enable Data Carrier Detected: DCD is Disabled
9. Captive Portal Strength: Block all access until sign-on is complete.
10. Walled Garden Ranges:
11. Please add all the Default walled garden entries.
    

    If you’re a white label client and you have your own splash domain, be sure to include it in the walled garden.

    
12.  Go to Wireless>Splash Page – Then select the SSID you just configured access control for.
13. Custom Splash URL: Enabled- Select one
    US-A Splash URL

    https://splash.4wifi.net/hotspotlogin.php
    

    If you have your own branded splash hostname you would use https://splash.yourdomain.com/hotspotlogin.php

    US-B Splash URL

    https://splash.4wifi-e2.net/hotspotlogin.php
    

    If you have your own branded splash hostname you would use https://splash.yourdomain.com/hotspotlogin.php

14. Splash Behavior: A Different URL: Enabled- Select one
    US-A Redirect URL

    https://splash.4wifi.net/hotspotlogin.php?res=success
    

    If you have your own branded splash hostname you would use https://splash.yourdomain.com/hotspotlogin.php?res=success

    US-B Redirect URL

    https://splash.4wifi-e2.net/hotspotlogin.php?res=success
    

    If you have your own branded splash hostname you would use https://splash.yourdomain.com/hotspotlogin.php?res=success

15. Then ‘Save changes”The additional steps below are OPTIONAL. If you don;t perform these extra steps then you may get a notification in your e-mail everyday from Cisco. We recommend not performing these extra steps and just turning off the notification by following these steps (from Cisco support dept): If you do not want to open the path to your RADIUS server from the Meraki cloud address (x.x.x.x), you could just turn off notifications. The way to do this would be to remove your email address from the notification section of Network-wide > General > Network alerts > Send alerts via email to:
16. You may also need to create some firewall rules in the Meraki Dashboard (To stop some alerts from coming into your e-mail) although this is not required for the Smart WiFi Services and splash pages to function:
    

17. 

18. Add the following entries to this area:
    Allow UDP: 52.23.46.139/32 Port 1812
    Allow UDP: 52.23.46.139/32 Port 1813
    Allow UDP: 52.207.192.243/32 Port 1812
    Allow UDP: 52.207.192.243/32 Port 1813
19. You will need those ports open from your primary ISP router as well.