Organization Authentication RADIUS Servers Configuration

Dashboard Location: Organization > Configure > Authentication RADIUS Servers

Organization authentication RADIUS servers configuration in Meraki provides administrators with centralized RADIUS server management capabilities, enabling organization-wide authentication server definitions that can be referenced across multiple networks and access policies. This functionality supports centralized authentication infrastructure, consistent RADIUS server configuration, simplified server management, and scalable 802.1X deployment while providing a single point of administration for RADIUS server settings. Authentication RADIUS servers are essential for enterprise authentication strategies, network access control, switch port security, wireless authentication, and maintaining consistent authentication infrastructure across the organization while supporting secure network access management.

Example-1: The example below demonstrates organization-wide RADIUS server configuration.

This configuration creates organization-wide RADIUS servers that can be used across multiple networks for authentication and accounting purposes. The example includes primary and backup RADIUS servers with different modes configured for authentication and accounting services.

The organization has two RADIUS servers defined: “Main RADIUS server” at IP address 10.64.0.238 configured for both authentication (port 1812) and accounting (port 1813), and “Secondary RADIUS server” at hostname radius-server.example.com configured only for authentication (port 1812). Each server requires a shared secret for secure communication. These servers are defined at the organization level and can be managed centrally for use across the organization’s networks.

meraki:
  domains:
    - name: !env domain
      administrator:
        name: !env org_admin
      organizations:
        - name: !env org
          authentication_radius_servers:
            - name: "RADIUS server 1"
              address: "10.64.0.240"
              secret: "my-shared-secret"
              modes:
                - mode: "auth"
                  port: 1812
                - mode: "accounting"
                  port: 1813
            - name: "RADIUS server 2"
              address: "radius-server2.example.com"
              secret: "backup-secret"
              modes:
                - mode: "auth"
                  port: 1812