Cisco Meraki Integration

Guest WiFi splash on Meraki using 'Sign-on with my RADIUS server' + a custom splash, authenticating against Captivo RADIUS.

1Register Meraki in Captivo

In Captivo: Settings → RADIUS → add Meraki's RADIUS source IP and the same shared secret as a NAS client.

2Set the splash to RADIUS sign-on

Dashboard → Wireless → Configure → Access control. Select your guest SSID. Security = Open (no encryption). Splash page = 'Sign-on with' → 'my RADIUS server'.

3Add the Captivo RADIUS server

On the same Access control page, under RADIUS click 'Add server': Host = your Captivo RADIUS public IP/FQDN, Auth port = 1812, Secret = your shared secret. Use the 'Test' button to confirm the access points can reach the RADIUS server.

4Walled garden (important)

On the Access control page set Walled garden = Enabled and add app.captivo.io (use the public-facing IP/domain, not the LAN address). With 'Block all access until sign-on is complete', anything outside the walled garden is unreachable before sign-in.

This is the #1 cause of 'the splash opens but no SMS arrives'. The splash page's JavaScript fetches the verification code from app.captivo.io, so that domain must be in the walled garden, reachable before sign-in. You do NOT need to add your SMS provider's domain — Captivo sends the SMS from its own servers.

For the Active Sessions list to work: enable RADIUS accounting (port 1813) AND make the device send periodic accounting updates. Captivo treats a session as live while the device keeps signalling it; if only a start and a stop are sent, a guest who is still online drops off the list after 10 minutes while the device's own screen still shows them. The setting is usually called Interim, Accounting Interim Update or Update Interval; one minute is a good value.

5Upload the Captivo splash as a custom theme

Dashboard → Wireless → Configure → Splash page → themes → 'Create something new' (the Meraki-hosted custom HTML editor). Paste the Cisco Meraki HTML downloaded from Settings → Portal → Templates. Meraki substitutes its page variables (login_url, continue_url, client_mac) when it serves the page, and the form POSTs username/password to login_url with a hidden success_url = continue_url — exactly what the Captivo template does, so no edits are needed.

Use the Meraki-hosted custom theme (Meraki substitutes the variables). Do NOT use the external 'Custom splash URL' option — there login_url arrives as a query parameter and the static template won't work without extra JavaScript.

Test and troubleshooting

Connect a guest device: the branded splash appears, verify via SMS/voucher, and Meraki grants access. Auth and identity logs appear right away; to see live sessions in the dashboard, also add a RADIUS accounting server (port 1813) in the Meraki RADIUS settings.

Troubleshooting — Splash doesn't show: check splash = 'my RADIUS server' and the RADIUS Test passes. No SMS: walled garden (step 4). 'Authentication failed': the NAS client IP/secret in Captivo doesn't match Meraki's RADIUS settings.

For product-wide problems: The portal does not open · Sign-in is rejected · Sessions do not appear