> ## Documentation Index
> Fetch the complete documentation index at: https://docs.wiacom.ai/llms.txt
> Use this file to discover all available pages before exploring further.

# WiFi Pass

> Per-user Identity PSK provisioning on Cisco Meraki

WiFi Pass support both Meraki's **Identity PSK without RADIUS** and **Identity PSK with RADIUS (Easy PSK)** features integration. Each registrant receives a unique personal passphrase provisioned on the SSID via the Meraki iPSK API (for ipsk-without-radius) or pushed directly to RADIUS (ipsk-with-radius).

## Requirements

Requires **Wi-Fi 5 Wave 2 or newer** access points:

| Generation     | Supported Models                                                         |
| -------------- | ------------------------------------------------------------------------ |
| Wi-Fi 5 Wave 2 | MR20, MR30H, MR33, MR42, MR42E, MR52, MR53, MR53E, MR70, MR74, MR84      |
| Wi-Fi 6        | MR28, MR36, MR36H, MR44, MR46, MR46E, MR56, MR76, MR78, MR86, MR45, MR55 |
| Wi-Fi 6E       | MR57, CW9162I, CW9164I, CW9166I                                          |

<Warning>
  Older MR access points (Wi-Fi 4 / Wi-Fi 5 Wave 1) do not support Identity PSK. All APs in the network must meet the minimum hardware and firmware requirements.
</Warning>

* Meraki firmware **MR 30.1 or later** on all APs
* At least one **Group Policy** configured in the network (**Network → Group Policies**)
* Available SSID
* API mode required when ipsk-without-radius is used

## Guest Experience

<Steps>
  <Step title="Registers">User registers via any [onboarding channel](/onboarding/overview).</Step>
  <Step title="Provisioned">A unique passphrase is created for the SSID.</Step>
  <Step title="Network details delivered">The SSID and passphrase are delivered to the user. The QR code allows one-tap connection on supported devices. These details can optionally be shown on-screen at registration time and sent through one of the enabled communication channels. See [Messaging Services](/integrations/messaging).</Step>
  <Step title="Connects">User connects using standard WPA2 — no app, no profile required.</Step>
</Steps>

## Limits

For deployments exceeding 5,000 credentials, Identity PSK with RADIUS (Easy PSK) should be used.

## Manual Configuration (Legacy / Non-API Mode)

Only **Identity PSK with RADIUS (Easy PSK)** is supported in legacy mode.

<Info>
  If you connected Wiacom via the Meraki API, SSID configuration is pushed automatically — skip this section.
</Info>

<Warning>
  RADIUS server FQDN/addresses, ports and shared secrets are region-specific. Obtain all values from the Wiacom admin panel or the Wiacom team before proceeding.
</Warning>

Log in to [dashboard.meraki.com](https://dashboard.meraki.com), navigate to **Wireless → Access Control**, and select your SSID.

### Access Control

| Setting            | Value                                                      |
| ------------------ | ---------------------------------------------------------- |
| SSID status        | Enabled                                                    |
| Security           | Identity PSK with RADIUS (Easy PSK)                        |
| Splash page        | None (direct access) - Ask Wiacom if you want to enable it |
| Client IP and VLAN | As preffered, per your network config                      |

### RADIUS Authentication Servers

Under **RADIUS**, click **Add server** and add two entries:

| # | Host                | Auth Port | Secret                   |
| - | ------------------- | --------- | ------------------------ |
| 1 | `<RADIUS_SERVER_1>` | 1812      | `<RADIUS_SHARED_SECRET>` |
| 2 | `<RADIUS_SERVER_2>` | 1812      | `<RADIUS_SHARED_SECRET>` |

Click **Save Changes**.

Follow [this procedure](/wifi-vendors/cisco-meraki/onboarding#manual-mode) for adding Meraki devices into the Wiacom platform.

## Troubleshooting

<AccordionGroup>
  <Accordion title="Provisioning fails after registration">
    Ensure the SSID is set to *Identity PSK without RADIUS* and at least one Group Policy exists in **Network → Group Policies**.
  </Accordion>

  <Accordion title="Passphrase rejected at the device">
    Check the credential is not suspended or expired under **WiFi Pass → Credentials**.
  </Accordion>

  <Accordion title="Credential stopped working unexpectedly">
    Check the expiry timestamp in the credential record. The user can re-register to receive a new passphrase.
  </Accordion>
</AccordionGroup>