Skip to end of metadata
Go to start of metadata

What do I need?

Before you configure this appliance, you will need a RADIUS Server license. You can reach out to support@nexudus.com to obtain one.


  1. Once you have the license, paste it in Space Settings > Integrations > Radius




  2. Save the settings and then click on "Manage Radius Servers".
  3. Click on "Add Radius Server" and give it a meaningful name and a description. Choose the correct appliance vendor




  4. Once the server is created you can access its details to get the IP addresses, port numbers and secrets to used in the configuration of the appliance below.


Each license comes with two geographically redundant servers for RADIUS Authentication and RADIUS Accounting. We will create these as close as possible to your physical location based on the data-centers we have available.

How to configure a Meraki Controller to use external Captive Portal authentication.

This option will present users with a splash page. It relies on your WiFi network to be open or to use a shared WiFi password. When users connect to it and open their browser, they will presented with a login screen where to type their email and pincode to connect to your network. You can also configure this appliance to use Enterprise Authentication using the instructions in the next section below.

  1. Sign-in to the Meraki cloud portal.




  2. Navigate to Wireless -> Configure -> SSIDs and define a network that should be protected with a Captive Portal with RADIUS authentication



    Association requirements: Open (no encryption)

    Splash page: Sign-on with my RADIUS server

    Walled garden ranges:

    XYZ.spaces.nexudus.com (XYZ is the subdomain of your account as found in System > Spaces > your space name > Web Address.)
    107.178.250.42/32
    216.239.32.0/19
    64.233.160.0/19
    72.14.192.0/18
    209.85.128.0/17
    66.102.0.0/20
    74.125.0.0/16
    64.18.0.0/20
    207.126.144.0/20
    173.194.0.0/16

    You will need to contact Meraki support to enable domain names to be added to your Walled garden ranges so you can add XYZ.spaces.nexudus.com to that list.

    Enable Radius Servers.

    Add new RADIUS Authentication Servers and enter IP Address, Port and Shared Secret from the details of the Radius Server provided when you created the Radius Server above.

    Accounting servers are disabled by default when using splash pages in Meraki appliances. This means that Nexudus will not receive periodic updates while uses are in the space. Use Enterprise Authentication (below) to use RADIUS accounting or contact Meraki to enable this feature when using Splash Pages.



  3. Navigate to Wireless -> Configure -> Splash page and add Custom splash URL The URL here should be "http://XYZ.spaces.nexudus.com/en/splash". XYZ is the subdomain of your account as found in System > Spaces > your space name > Web Address. This page looks by default like this:




Configuring a Meraki Controller for WPA-Enterprise

This option will ask users for their email and pincode to connect to your WiFi network. Without those, they will not be able to gain network access in any way.

  1. Sign-in to the Meraki cloud portal.



  2. Navigate to Wireless -> Configure -> SSIDs and define a network that should be protected with a Captive Portal with RADIUS authentication



    Association requirements: WPA2-Enterprice With "My RADIUS server"



    Splash page: None



    Enable Radius Servers and Accounting

    Add new RADIUS Authentication Servers and enter IP Address, Port and Shared Secret from the details of the Radius Server provided when you created the Radius Server above.