Devices moving policies Dynamically

[AkilahIS]

Hi Everyone,

We have about 1000 PC (windows) client devices, all set to be in Policy 'Student". We have had numerous issues with students coming to us to say they cannot connect or the internet is *very* slow. When we dig into it they have moved policy to 'normal' which is restricted to 20Kbps. Somehow they have been reassigned but not by a member of the IS staff. something is not right or the MX250 has been hacked...

Can anyone throw any light on this?

THanks

[AjitKumar]

Hi @AkilahIS 

Two things.

One check the Organization - Change Log. To verify if the settings are modified.

Two by any chance the devices are assigned with another VLAN and your Global Policy is applied.

[AkilahIS]

HI Ajit,

I will check the logs for sure...thanks for reminding I had not done that.

We do not have any VLANS configured right now its a flat layer 3 network.

THanks!

/M

[samgbuyi · Accepted solution]

reapply the policy and check to be sure no other device is doing DHCP from an unknown Vlan

[PhilipDAth]

>We do not have any VLANS configured right now its a flat layer 3 network.

Group policy assignments only work for layer 2 adjacent clients to the MX.

If you have an MX, and then a layer 3 switch, and then clients hanging off VLANs off the layer 3 switch then they wont work.

The clients will appear to have the MAC address of the layer 3 switch - and the group policy will actually apply to that.  This will make it look like the policy is working - but it is not actually applied to the correct place.

[AkilahIS]

HI Phillip,

This is useful info, thank you. Actually, there was a typo...its a flat layer 2 with no Vlans.

We are planning now to start subnetting with multiple VLANS and IP addressing accordingly so your reply was very timely.

I spoke with Meraki support also and it seems we also have an overloading problem so upgrading to MR45 from MR33....

Thanks everyone for the help, very much appreciated.

[PhilipDAth]

>I spoke with Meraki support also and it seems we also have an overloading problem so upgrading to MR45 from MR33....

Althought the MR45 is a great choice (and my preferred AP to sell new clients) if you are experiencing client overloading then the solution is more access points rather than replacing existing APs with better APs.

[AkilahIS]

We have also ordered more APs..... 🙂