Cloud RADIUS and Guest WiFi for Cisco Meraki
Add 802.1X authentication and guest splash pages to your Meraki SSIDs without running a RADIUS server. IronWiFi hosts the RADIUS and the captive portal in the cloud — you point the Meraki dashboard at us and you are done. No appliance, no VM, no on-prem infrastructure.
What You Can Do with Meraki and IronWiFi
One cloud service behind every SSID in your Meraki network
802.1X and WPA2-Enterprise SSIDs
Set a Meraki SSID to WPA2-Enterprise with my RADIUS server and IronWiFi handles the 802.1X exchange. EAP-TLS, PEAP, and EAP-TTLS are all supported, so staff join with their existing credentials or a certificate instead of a shared passphrase.
Guest WiFi with a Meraki Splash Page
Point the SSID splash page at an IronWiFi captive portal and guests get a branded sign-on screen. Email, SMS, social, voucher, and self-registration flows are all built in, and every session is logged for reporting.
Your Existing Identity Provider
Meraki sends the RADIUS request to IronWiFi, and IronWiFi checks it against Microsoft Entra ID, Google Workspace, Okta, OneLogin, JumpCloud, or any LDAP and Active Directory you connect. No separate WiFi password list to maintain.
Per-User VLANs and Group Policies
IronWiFi returns the standard RADIUS tunnel attributes for dynamic VLAN assignment, and can return Filter-Id to apply a named Meraki group policy. Contractors, staff, and guests land on the right VLAN with the right bandwidth from one SSID.
Four Steps in the Meraki Dashboard
Everything is configuration — there is nothing to install on your network
Create your network in IronWiFi
Create a network in the IronWiFi console and note the primary and backup RADIUS server addresses, the authentication port, the accounting port, and the shared secret. For guest WiFi, also create a captive portal with the vendor set to Cisco Meraki and copy its splash page URL.
Add the RADIUS servers in Meraki
In the Meraki dashboard go to Wireless → Configure → Access control and select your SSID. Add IronWiFi as the primary and secondary RADIUS authentication server, then add the same pair as accounting servers so sessions are tracked correctly.
Pick guest portal or 802.1X
For guest WiFi, set Splash page to Sign-on with my RADIUS server, paste the IronWiFi splash page URL into Custom splash URL under Wireless → Configure → Splash page, and add the IronWiFi server address to the walled garden so unauthenticated clients can load the portal. For employee WiFi, set Association requirements to WPA2-Enterprise with my RADIUS server and leave Splash page set to None.
Test it
Use the Test button next to each RADIUS server in the Meraki dashboard, then connect a device and confirm the authentication shows up under Reports → Authentications in the IronWiFi console.
Available on the Cisco Marketplace
Buy IronWiFi through the procurement channel you already use
Cisco Marketplace
IronWiFi is listed on the Cisco Marketplace, so Meraki customers can find and evaluate the integration alongside the rest of their Cisco stack.
AWS Marketplace
Prefer to consolidate spend? Subscribe to IronWiFi through AWS Marketplace and it lands on your existing AWS bill, drawing down committed spend.
Have Questions? Get Answers
- Start a free trial and connect a Meraki SSID today
- Follow the step-by-step Meraki setup guide in the help center
- Ask us anything by email — we answer setup questions directly
Already using Meraki? See the Meraki configuration guide or browse all compatible hardware.