Connect. Secure. Manage.
Meraki Wired Access Manager Authentication
Plan wired authentication with Cisco Access Manager on supported Meraki-managed switches, including rollout stages and fallback access.
Devices supported
across the UK
Client locations
supported
Traffic handled
at peak time
Average
response time
Average response is not a resolution time or a contractual guarantee. Support scope and response commitments are agreed for each engagement.
Meraki wired Access Manager authentication applies identity-based admission and policy to supported switch ports through the Meraki-managed environment. MCI Network Services helps customers introduce it without treating every socket as an identical endpoint connection. We assess the connected equipment, client readiness and supported authorisation behaviour, then build a controlled rollout that protects recovery access and keeps legitimate devices working.
Defined trust
Make access boundaries explicit rather than relying on an assumed internal network.
Controlled access
Connect identity, policy and network enforcement to the services people actually use.
Evidence for change
Test the intended security outcome and retain useful operational records.
Classify the ports before applying policy
Desk connections, phones, printers, access points and switch uplinks have different roles. We establish which ports are appropriate for endpoint authentication and which carry infrastructure that requires another treatment. A broad template applied without that distinction can disrupt more than the individual device plugged into a socket.
Multi-device connections deserve specific attention. A phone with a workstation behind it, a meeting-room system or a specialist dock may present more than one endpoint. We verify the supported port mode and access behaviour for the actual switch and software. The design records those combinations so that later equipment changes do not quietly invalidate the original test results.
Standards & partnerships
Confidence in the team behind your network.
Cisco Partner
Cisco Meraki
Cyber Essentials
Cyber Essentials PlusMCI Network Services is operated by Proxar Ltd. Certifications apply to the certified legal entity and the scope of its certificates. View accreditation information
Confirm the cloud-managed switching capability
We check the switch models, firmware, management mode and Access Manager entitlement before promising a particular wired workflow. Supported authentication and returned policy options are verified against the exact estate. The presence of a device in the dashboard does not establish that every access feature available elsewhere is supported on that model.
The customer receives a clear account of any gaps. A legacy segment might remain on its existing authentication service while a supported group moves to Access Manager. That can be a sensible transition, provided the boundary and ownership are explicit. We avoid forcing a uniform product choice where the equipment or required access method does not support it.
A useful starting point
Not sure where to start?
Bring the requirement. We will help you define the engineering work.
Prepare managed clients and restricted exceptions
For 802.1X-capable endpoints, we coordinate the supplicant profile and credentials with the endpoint team. Certificate-based access requires a working enrolment and renewal process; a switch policy cannot supply those missing foundations. We test behaviour before user login and after ordinary events such as sleep or a network-adapter change.
Non-supplicant equipment may require a supported MAC-based exception or another specifically designed method. Such exceptions are restricted to the device's purpose and recorded in an owned inventory. A copied MAC address is not strong identity, so a successful match must not be used as a reason to place an unknown device into a broadly trusted network.
Different environments. The same care.
Built around the work
your network supports.
Finance, banking and the wider private sector. We start with the systems and people that depend on your connections.
Finance & banking
Market-data paths, routing and provider coordination on clients’ behalf.
Financial-market services ↗Offices & multi-site teams
Reliable access between people, workplaces and business applications.
Office network design ↗Data centres & cloud
Network boundaries, workload connections and operational ownership.
Data centre networks ↗Verify the policy beyond the switch port
An authorisation result may assign a VLAN or another supported access treatment. We check the forwarding path, addressing service and security boundary associated with that result. A device can pass authentication and still fail because the assigned segment lacks a working gateway or is absent from an uplink.
We also verify the restrictions. The acceptance plan includes a device that should be denied and one that should receive limited permissions. The test compares Access Manager's session decision, the switch's applied state and the actual application path. Those are separate pieces of evidence, all of which need to agree.
Introduce enforcement in manageable groups
We select a pilot covering representative endpoint and port combinations, then expand only when the results are understood. The rollout plan identifies recovery access, maintenance windows and who can approve a temporary exception. It does not depend on someone being able to reach the switch through the very policy being changed.
Unknown endpoints are investigated before being added permanently to an allow list. The customer should know which devices lack an owner and why an exception exists. This is especially important where old printers, building systems and contractor equipment have accumulated over time. The project can expose those dependencies without silently granting them the same access as managed workstations.
Understand failures and restoration
We agree the response to an unavailable authentication path and distinguish it from an explicit denial. Existing sessions, new connections and reauthentication may behave differently. The selected behaviour is checked for the actual platform and tested under an authorised scenario rather than inferred from a general cloud-service description.
Restoration is part of the plan. A device admitted through a restricted recovery state needs a predictable return to normal policy, and a temporary bypass needs removal. The support team receives a short sequence for separating cable faults, client configuration, identity problems and enforcement failures so that policy is not disabled indiscriminately during incidents.
Keep the implementation maintainable
MCI hands over the port-role register, endpoint exceptions, access rules and test evidence. We identify ownership of certificates, client profiles and dashboard changes. The work can sit within a wider Cisco Access Manager programme or a defined switch-access project, with ongoing administration and response commitments agreed separately for the customer's UK sites.
Technical references
- Cisco Access Manager deployment guide — Cisco / Cisco Meraki
Talk to a specialist
What does your network need next?
Tell us what you are planning, changing or trying to improve. We will help define a practical next step and the engineering scope.
+44 203 196 6566Choose option 1
sales@proxar.co.ukUK-wide service.
Most of our engineers are based in Kent, with a focus on London, Sussex, Essex and Berkshire.
Existing customers should use their agreed support and escalation channels. This form is for service enquiries, not a monitored emergency ticket.
Tell us what you need.
A short outline is enough. Please do not include passwords or sensitive network details.
Thank you. Your enquiry has been submitted.
Please check your name, email and message, then try again.
Your form session expired. Please try again.
Please wait a minute before sending another enquiry.
We could not submit your enquiry. Please call or email us instead.