Cisco Meraki & Google Apps

@Allen_Falcon - Yes it was upgraded by Meraki Support Team.

Hello Team,IntroWe are using Cisco Meraki Aps MR34 for our WiFi Solution for our 3campuses serving over 3000 students every day. Users are being authenticatedwith their Google Apps Ids for Education.Problem.We were successfully using the Google Apps email IDs credentials whichis powered by Google to authenticated our WiFi users until 20th April 2015.Then Google changed their authentication method OAuth 1.0 to OAuth 2.0. As ithappens; users were forced to redirect to Google authentication page instead oftyping their user ID and password on Meraki splash page.But now we are facing a problem authenticating OAuth 2.0 thru MerakiAccess point because of one or more following reasons.1. Users are already logged with their personal Gmail2. Some devices are not compatible with redirecting process3. Need to clear cache and cookies 4. Need to...
This topic first appeared in the Spiceworks Community

Similar Messages

  • HP Wireless Printers cannot connect to WPA2-secured WiFi networks with Cisco/Meraki WAPs

    In the last two months, I've had the displeasure of working with two very different HP printers and attempting to make them work on a WPA2-secured wireless network.  All attempts to authenticate fail with "invalid phassphrase". 
    I'm not the first person to encounter this, it's a problem with many different HP wireless printers (I just happen to have physical access to the OfficeJet Pro 8610 & Deskjet 3511). 
    My equipment is a Cisco ASA 5505 Firewall running ASA 9.1x & Cisco Aironet 1142 running IOS 15.3.x. 
    What does work on the WPA2/AES SSID:  Apple MacBook Air running OSX 10.10.2, Three Windows-Based laptops running Windows 8.1 Update 1, an iPhone 5s, Three Windows Phone 8.1 devices, Roku 2, PlayStation 4, PlayStation 3, Sharp Aquos TV, Amazon Streaming Stick, and an Android Tablet (Jellybean).  Basically, everything. 
    What does not work on the WPA2 network:  OfficeJet Pro 8610 & Deskjet 3511.
    To test the theory there is a problem with HP's implementation of WPA2 with regard to Cisco Aironet IOS, I built out a second SSID that only works in WPA/TKIP mode.  This solution works.  Both HP printers will join the WPA/TKIP network.
    So, I'm able to demonstrate there is a certain connectivity issue.  When i look at AAA Debug on the WAP's console, I can observe the HPs attempt to authenticate "Bind I/F" on the WPA2 SSID, however they do not achieve authentication and do not pass the AAA phase.  However, on the WPA SSID, they bind and authenticate successfully. 
    To help illustrate this, here is my WAP running config.  It's about as simple as it can get.  There is no relevant MAC filtering or ACLs bound to any interface.  Noting that I have an ACL on remote access to the WAP (i.e. Locked down to SSH, disabling telnet).  The main point being that the ASA firewall is not a factor in this problem as the issue is at the WAP before WPA2 authentication can complete, therefore the printers never reach the network / when the printers connect to the WPA network, the operate fully & correctly. 
    If anyone at HP can indicate why this particular config is somehow improper or broken, that would be fantastic.  There should be no reason why Cisco / Meraki WAP owners have to lower wireless encryption standards just for a printer, be forced into wired, create separate SSIDs with lower encryption specifically for a device. 
    Building configuration...
    Current configuration : 6064 bytes
    ! Last configuration change at 12:46:47 UTC Fri Aug 20 1993 by admin
    version 15.3
    no service pad
    service timestamps debug datetime msec
    service timestamps log datetime msec
    service password-encryption
    hostname 10-10-50-1
    logging buffered 1024768
    logging rate-limit console 9
    aaa new-model
    aaa authentication login default local
    aaa authorization exec default local
    aaa session-id common
    no ip source-route
    no ip cef
    ip domain name freedom.local
    dot11 syslog
    dot11 vlan-name inside vlan 50
    dot11 vlan-name inside-wpa-only vlan 70
    dot11 ssid inside
       vlan 50
       band-select
       authentication open
       authentication key-management wpa version 2
       mbssid guest-mode
       wpa-psk ascii 7 xxxxxx
       information-element ssidl
    dot11 ssid inside-wpa-only
       vlan 70
       band-select
       authentication open
       authentication key-management wpa
       mbssid guest-mode
       wpa-psk ascii 7 xxxxxx
       information-element ssidl
    dot11 band-select parameters
       cycle-count 3
       cycle-threshold 200
       expire-supression 20
       expire-dual-band 60
       client-rssi 75
    dot11 wpa handshake timeout 500
    dot11 network-map
    username ADMIN privilege 15 secret 5 xxxxxx
    ip ssh version 2
    bridge irb
    interface Dot11Radio0
     no ip address
     no ip route-cache
     encryption vlan 50 mode ciphers aes-ccm
     encryption vlan 70 mode ciphers aes-ccm tkip
     ssid inside
     ssid inside-wpa-only
     antenna gain 0
     mbssid
     speed  basic-1.0 basic-2.0 basic-5.5 basic-11.0 6.0 9.0 12.0 18.0 24.0 36.0 48.0 54.0 m0. m1. m2. m3. m4. m5. m6. m7. m8. m9. m10. m11. m12. m13. m14. m15.
     channel 2412
     station-role root
     l2-filter bridge-group-acl
    interface Dot11Radio0.50
     encapsulation dot1Q 50 native
     no ip route-cache
     bridge-group 1
     bridge-group 1 subscriber-loop-control
     bridge-group 1 spanning-disabled
     bridge-group 1 block-unknown-source
     no bridge-group 1 source-learning
     no bridge-group 1 unicast-flooding
    interface Dot11Radio0.70
     encapsulation dot1Q 70
     no ip route-cache
     bridge-group 70
     bridge-group 70 subscriber-loop-control
     bridge-group 70 input-address-list 700
     bridge-group 70 output-address-list 700
     bridge-group 70 spanning-disabled
     bridge-group 70 block-unknown-source
     no bridge-group 70 source-learning
     no bridge-group 70 unicast-flooding
    interface GigabitEthernet0
     no ip address
     no ip route-cache
     duplex auto
     speed auto
    interface GigabitEthernet0.50
     encapsulation dot1Q 50 native
     no ip route-cache
     bridge-group 1
     bridge-group 1 spanning-disabled
     no bridge-group 1 source-learning
    interface GigabitEthernet0.70
     encapsulation dot1Q 70
     no ip route-cache
     bridge-group 70
     bridge-group 70 spanning-disabled
     no bridge-group 70 source-learning
    interface BVI1
     mac-address xxxx.xxxx.xxxx
     ip address 10.10.50.1 255.255.255.0
     no ip route-cache
    ip forward-protocol nd
    ip http server
    ip http authentication aaa
    no ip http secure-server
    ip http help-path http://www.cisco.com/warp/public/779/smbiz/prodconfig/help/eag
    ip route 0.0.0.0 0.0.0.0 10.10.50.2
    logging history size 100
    access-list 111 permit tcp any any neq telnet
    bridge 1 route ip
    line con 0
     access-class 111 in
    line vty 0 4
     access-class 111 in
     length 0
     transport input ssh
    line vty 5 15
     access-class 111 in
     transport input ssh
    end

    I get the same behavior with a laserjet m451nw. I need to enable tkip to get the printer working, it doesn't support pure aes-ccm (every other device here supports pure aes-ccm, even cheap ones), although it's advertised as working.
    The following snippet of config works, but I still think it should work without the tkip "hack".
    dot11 ssid whatever
    vlan 1
    band-select
    authentication open
    authentication key-management wpa version 2
    interface Dot11Radio0
    encryption vlan 1 mode ciphers aes-ccm tkip

  • Google Apps account now showing Unknown Error when trying to sign in

    This is a post I made over at webosnation.com, but no one knows what's going on over there (but a handful of people are having the same problem).
    For some reason my main email account has decided to fly off a cliff on both my FrankenPre2 and my TouchPad. The things I've tried from searching around the net:
    -Changing my password
    -Making sure the new password does NOT use any special characters
    -Removing the account from my Pre and re-adding it
    -Disabling multiple sign-on from the Google side (I had it linked to the account I use for Google Voice)
    -Removing all patches from my Pre
    None of these things have had any effect. When I put a wrong password in it comes back with an invalid password error. The correct password bring back an Unknown Error.
    The funny thing is I have a 2nd Google Apps account set up on both devices for work, and that hasn't had any problems.  What makes this even weirder is my friend who owns the Google Apps domain I'm on has a TouchPad with his account set up on it and it works fine. Any other suggestions would be greatly appreciated.
    Post relates to: HP TouchPad (WiFi)

    Aaaaaaaand we're back up and running.

  • How do I use the google+  app to upload photos to google  from my ipad2

    I have already downloaded the Google+ App to my iPad2 but am unclear how to download my photos to my Google+ page.   How do I do this?

    Touch the Photos Tab at the bottom, select your photos, add caption and share to the audience you select in "To".

  • Mail.app Stopped Working with Google Apps Account

    I have accessed my Google Apps e-mail account via Mail.app for many months with no problems. Then all of a sudden yesterday it has stopped working. I can't download new messages no matter what I do, and it does not give me any errors such as wrong username/password. I have tried sending a few test e-mails out and they get sent even though Mail.app shows the message as still being sent endlessly (the blue progress bar goes to about 50% and then just sits there, however the recipient receives the e-mail). Has anyone experienced this problem? It may be a complete coincidence, but I also just upgraded my version of Aperture 2 to Aperture 3 and it has been having all sorts of problems (which others are experiencing as well). Any help is greatly appreciated.

    After some searching I have found a solution. I had to delete the contents of the following folder:
    ~/Library/Mail/myemailaccount/.OfflineCache/
    Note: replace "myemailaccount" with the appropriate folder on your computer that represents your e-mail account. Once I deleted the contents of this folder (there were 2 files), and restarted Mail, there were no problems.
    Hope this helps a few people in the future!

  • Google app won't unless its connected to Wifi. How can I get it to work on 3G?

    My google app will load the home screen fine and allows me to search on it, but when it loads it says "Unable to get results. Please check your network connection." The app also works fine on Wifi, just not 3G. How can I get it work with 3G?

    Hi there mpenner93,
    You may find the troubleshooting steps in the article below helpful.
    iOS: Troubleshooting apps purchased from the App Store
    http://support.apple.com/kb/TS1702
    -Griff W.

  • Google apps wont push iphone 4 ios5

    I added my google apps account in mail the same way i did with my ipad 2 but in the iphone it wont push the mail ( only updates when i open mail app)

    I deleted my Gmail/Exchange account on my phone and set it up again (exchange server) and now both my push mail and my calendar are working.  Hoping it does for you, too.

  • My Safari will not allow me to open my Google calendar with Google Apps. I have to open my email with the older version of Google Apps. This happened after I installed 5.1.4. I tried to use the fix of changing to 64 bit by unchecking the 32 bit box no go

    My Safari will not allow me to open my Google calendar with Google Apps. I have to open my email with the older version of Google Apps. This happened after I installed 5.1.4. I tried to use the fix of changing to 64 bit by unchecking the 32 bit box but that didnt help.

    I assume that there are legal restrictions on the way in which iTunes can get artwork automatically from any source apart from the iTunes Store (which is what the right-click > Get Album Artwork function uses).  For example, even though the Gracenote service that iTunes uses to match CDs and retrieve metadata (artist, album, track titles, etc.) also has artwork functions, iTunes does not make use of these.
    For manual addition of artwork, there are three cases where the image you select may not be correctly embedded in your media files:
    your media are in a format that doesn't accommodate embedded artwork - typically WAV files.  To embed artwork you'll need to convert to another format - Apple Lossless or AIFF if you want to preserve lossless quality, AAC or MP3 otherwise.
    your media files are read only - to fix this, use Windows Explorer to find the folder that contains your files, right-click and select Properties.  On the General tab there's a check box labeled "Read-only" - if this is checked, or is grey (sometimes blue), click the box so that the flag is unchecked and the box is white.  Click OK, and then OK again when the "Apply changes to this folder, subfolders and files" option selected.  Now try adding the artwork again.
    Windows permissions issues are preventing iTunes from updating your media files (there's some anecdotal evidence of a change in this behavior in iTunes 12).  See turingtest2's notes on Repair security permissions for iTunes for Windows for advice on fixing this, then try adding the artwork again.

  • After installing Mavericks on my iMac, Apple Mail would not sync with my Google Apps email account.  Now Mail crashes every time I open it.  What's up?

    After installing Mavericks on an imac, Mail would not sync with my Google Apps email account.  After I clicked on All Mail the program crashed and now it crashes every time I open Mail.  Does anyone have an suggestions?

    Try setting up another admin user account to see if the same problem continues. If Back-to-My Mac is selected in System Preferences, the Guest account will not work. The intent is to see if it is specific to one account or a system wide problem. This account can be deleted later.
    Isolating an issue by using another user account
    If the problem is still there, try booting into the Safe Mode using your normal account.  Disconnect all peripherals except those needed for the test. Shut down the computer and then power it back up. Immediately after hearing the startup chime, hold down the shift key and continue to hold it until the gray Apple icon and a progress bar appear. The boot up is significantly slower than normal. This will reset some caches, forces a directory check, and disables all startup and login items, among other things. When you reboot normally, the initial reboot may be slower than normal. If the system operates normally, there may be 3rd party applications which are causing a problem. Try deleting/disabling the third party applications after a restart by using the application un-installer. For each disable/delete, you will need to restart if you don't do them all at once.
    Safe Mode
    Safe Mode - About
    General information.
    Isolating issues in Mac OS X
    Troubleshooting Permission Issues
    Step by Step to Fix Your Mac

  • How to configure multiple email addresses for a Google Apps profile on iOS 8.1?

    I've got a Google Apps account with 4 incoming email addresses. I'd like to use either Exchange or Google as the email type for this account. I understand how to setup the original account (done, works great). I understand how to change the one-and-only sending address to essentially any one of the 4 authorized send-from emails. However, I can't seem to figure out how to add all 4 addresses so that Mail.app on my phone automatically chooses the correct address for replies to incoming

    I would like to know this too, although as far as I have read, it's not possible (anymore) with Mail. Previous you would have added your 4 email addresses separated by commas as your email address. I tried doing that recently but Mail did not understand it. You will need to resort to using the official Gmail app for your secondary incoming addresses.

  • We use google apps and i have my partner's calendar shared on my macbook pro yosmite ical.   How do I get his calendar to share with my iOS8 devices

    Company uses Google apps and Calendar.  my partner and I share calendars on macbook pro yosemite 10.1 using apple calendar.  How do we share google calendars on iphones and ipads running iOS 8.1.2 using apple calendar?

    Hello JKN8R,
    You should be able to add the calendar by going to Settings > Mail, Contacts, Calendars > Add Account and tap either Google or click on More… and select Add CalDAV Account and enter in the log in information to have them added to your iPhone. Take a look at the article below for more information. 
    Set up other mail, contacts, and calendar accounts
    http://help.apple.com/iphone/8/#/iph3bf432fd
    Regards,
    -Norm G. 

  • How do I make Mac mail and iOS Mail sync to each other with a google apps (not traditional gmail) mail account?

    I have a google apps mail account in the form [email protected] I have successfully set up both my mac (A1342) Mail and my iPhone (5c) mail so I get my account on both devices. However, when I read an email on my iphone, it remains unread on my mac (and vice versa). But if I read an email on either, the copy in my Gmail inbox on the web is correctly changed to read. How do I set up my mac Mail and iOS mail so they interact with eachother?
    I am running OSX 10.9 and iOS 7.

    Set the account (on the Mac) as an Imap account, it seems as though it is currently set as POP.

  • Office 365 vs Google Apps?

    I wanted to share a recent guest post by the CEO of Champion Solutions Group on behalf of Sanjeevini Mittal on how customers find Office 365 vs Google Apps. What is your experience?  
    Today’s
    guest blogger is Chris Pyle, president and CEO of Champion Solutions Group, an award-winning Microsoft Gold partner that helps
    small and medium enterprises develop cloud strategies and deploy cloud solutions. Founded in 1979, Champion has 22 offices in 11 states and is the parent company for MessageOps, which focuses exclusively on helping customers move seamlessly to the Microsoft
    Cloud. The two companies have helped hundreds of customers migrate to Office 365.
    At Champion Solutions Group, we focus on small and medium enterprises (SMEs) that range from about 250 to 2500 seats. We have helped hundreds of business, education and government customers migrate a total of about 700,000 seats to Office 365. As part of our
    work, we have helped many customers migrate to Office 365 from Google Apps, including several who previously had left Microsoft for Google.
    In working with our customers, we focus on operational efficiencies, making sure the organizations that adopt the Office 365 platform really make the most of it. Just because you migrate to Office 365 doesn’t mean you’re done. That’s Day One. There’s still
    Day Two (how you set everything up) and Day Three (how you collaborate and leverage the power of Office 365). We help our customers with all three stages.
    Why customers choose Office 365 over Google Apps:  For organizations that switch from Google Apps to Office 365, the number one reason is that they find Office 365 is easier to use
    and offers greater productivity than Google Apps. Because it is enterprise-grade and much more business-focused than anything Google can offer, customers also say that Office 365 is more robust than Google Apps.
    As an example, one of our customers is a large grocery chain on the East Coast, with more than 10,000 users in many different locations. When the company decided to abandon Google Apps and adopt Office 365, the top two reasons were the usability and robustness
    of Office 365. In fact, one of the main reasons the company finally decided to switch to Office 365 was that employees complained so much about Google Apps. They said it was very cumbersome and didn’t work for them. They just didn’t find Google Apps as productive
    as Office 365.
    Choice is another important factor for many organizations when they are considering different cloud solutions. When we ask our customers why they choose Microsoft over Google Apps, many say that having a choice of cloud, on-premise or hybrid solutions gives
    them the flexibility to meet their business needs. With Google, the cloud is the only option. Customers like having a productivity solution they can tailor to their business.
    Office 365 is more cost-effective than Google Apps:  There’s an immediate cost benefit to customers who choose a cloud solution. They save money on the initial capital outlay, and they
    can convert those savings to operational investments, but the cost-effectiveness of any solution is about more than the initial price tag.
    When customers are choosing a cloud solution, they ask questions about productivity, security, and how well it works. Microsoft provides positive answers to all of those questions. In our experience, the productivity suite that Microsoft delivers with Office
    365, compared to Google Apps, makes it the “right way” for most organizations.  Over the long term, Office 365 is often the most cost-effective choice.
    The bottom line:  What we offer our customers when we help them migrate to Office 365 is a way to transform how they work, to innovate, and to come up with better ways to make a difference
    to their customers. Once our customers begin to understand and use the full capabilities of Office 365, they report a significant increase in productivity,
    with their employees doing a tremendous amount of work from almost any location, on any of their devices, and being much more collaborative.

    I am grandfathered into a Google Apps account with 50 seats. I also pay for a 5 user seat Office 365 account. My personal domains are on Google Apps and my business domains are on Office 365. How both services are great, I prefer Office 365 to Google Apps
    any day of the week. Now, I am a huge Google user. But my eco-system is so Microsoft heavy, I will stick with Windows Phone 8.1 and Windows 8.1 OS's for now. But that is not the only reason. Google Apps is simple. That is what makes Google Apps so strong is
    that it is simple to use. Office 365 is robust. That is what makes Office 365 so strong is that it is robust. Now, the major difference. Office 365 is a little harder to use and set up than Google Apps is. A small company of 5 users may benefit with Google
    Apps if they do not have an IT department. With Office 365, if you have 20 users, I will suggest some kind of geek working there to handle some of the IT because Office 365 is a little too robust. For me, my business, I like robust. I prefer the features of
    Office 365 over Google Apps. I like the control I have over Office 365. Google Apps does not give you control, it is straight forward. For some companies, Google Apps may be great for them. For large large enterprises, they may want to consider Office 365.
    Though, there are a lot of large enterprises settling with Google Apps. Either way, it all depends on the needs of the company. Both services are good. I just prefer Office 365 and my opinions are just as valid as someone who prefers Google Apps.

  • Can I set my iCloud email as the outgoing mail server for my google apps email account in Mac Mail?

    I have a google apps email account from an old client, all my work emails have been going to it for years. As I'm no longer affiliated with this client I'd like to make a transition to using my iCloud account for work. I asked people to use my iCloud address but as they've been using my google apps address for years it's what automatically comes up when they type my name.
    I figure the easiest way to make a transition is if I reply to all the emails that arrive at my old address from my iCloud address and gradually they will start using my new address without realising it. But I can't find a simple way to do this.
    In Mac Mail preferences > accounts > Google IMAP (my old account name) > Account information > Outgoing Mail server (SMTP) I'd like to set my iCloud SMTP server. But although my iCloud account uses its own outgoing mail server for its own account , it is not in the server list when I select my google account. I've tried to add it to the server list as smtp.mail.me.com but it caused my whole iCloud account to give me error messages until I force quit Mail...
    Any ideas?

    In iCloud/Mail, have you tried going to Preferences (select with gear at lower left)/Composing and setting a Send from address there?

  • Looking for a Google Apps replacement

    We need business collaboration tools for our XServe.
    We are currently using Google apps to edit docs and spreadsheets and need to bring the data in-house.
    What is available that offers the same functionality?
    The key feature is multi-user edting.

    Then you're probably looking at something like a Wiki - the Apple-supplied one may or may not meet your needs - and if not then investigate one of any number of open-soruce CMS - but this is going to have to be based on your specific feature-set and workflow requirements.

Maybe you are looking for

  • How to get the POSIX path of a display profile under 10.6?

    Hi forum, I'm currently struggling with an AppleScript that returns the POSIX path of the profile of the 1st display just fine when run under OS X 10.4.11. But under 10.6, I can't seem to get it to work, it raises 'syntax error: Expected "," but foun

  • (solved) lcdproc as a user

    Hi all, I have just setup lcdproc and it works fine as root, but if I start lcdproc as a user nothing happens and the process dies... If I start it as root I get all I want displayed on the screen, but I cannot find what's the difference since the se

  • RangeCheck method naming convention in ArrayList

    I was just going through the source code of ArrayList, found this method private void RangeCheck(int index) Just wondering why this is not named according to camel case, was it a mistake? Regards, Joshua

  • About rfc concept

    hi gurus, Can any body explain me about the rfc concept. Thanks.

  • I just purchased a subscription to call the UK and...

    Hi.  I just purchased a subscription to call the UK for $6.99 USD / Mo.  Once my account displayed that the subscription had been delivered I made a call to this number inside the UK, 845XXXXX, which belongs to a large charitable organization.  I am