Skip to main content

 

Cisco Meraki Documentation

Configuring EAP-TTLS + PAP Authentication on Windows 8 and 10

  1. Last updated
  2. Save as PDF

The following steps outline how to configure a Windows 8 or 10 device to authenticate to a Meraki wireless network configured to use WPA2-Enterprise 802.1X with Google Auth:

  1. In Windows, navigate to the Network and Sharing Center:
    Control Panel > Network Settings > Setup a new connection
  2. Click Set up a new connection or network.
  3. Select Manually connect to a wireless network:
    Manually cnnect to a wireless network
  4. Enter information for the wireless network:
    • Specify your SSID name.
    • Select WPA2-Enterprise as the security type:
      Network name, security type, encryption type, security key, start this connection autromatically.
  5. After the new WiFi configuration is successfully added, click Change connection Settings to open the connection properties:
    Success box > Change connection settings
  6. Go the the Security tab under the connection properties page.
    1. Choose Microsoft: EAP-TTLS as the authentication method. 
    2. Click Settings:
       Choose a network authentication method: Microsoft: EAP-TTLS
    3. Select PAP as the non-EAP method for authentication:

 

Note that it is generally best practice for end user security to set up Server certificate validation, which requires some additional client side configurations. Those steps will vary based on your environment's server configuration, and as such, they are not outlined here. If Server certificate validation is not configured, Enable identity privacy should be checked to maintain end user security, preventing user credentials from being sent in plain text to a potentially untrusted server.

 

TTLS Properties > Client Authentication > Select a non-EAP Method for authentication > Unencrypted password (PAP)

 

  1. ​Close the TTLS Properties window, then select Advanced Settings:

Security > Advanced settings

  1. Check Specify authentication mode
  2. Select User authentication
  3. Click Save credentials
  4. Enter the user’s credentials

Username and Password > Ok