I have Meraki AP's connected to Meraki switches and have two SSID's configured. One is guest and one is internal. The guest network is configured for NAT mode with PSK and is only filtering Video and Music, no filtering on the internal network. We are unable to make or receive any phone calls while connected to the wireless network.
I thought it might be a FW issue for the internal network but the guest network is not working either and it does not use our firewall.
Wi-Fi calling is enabled on their smart phones as they say it works for them at other locations.
I will try to place a phone in airplane mode and see what happens.
The best tip I can give you re Wi-Fi calling is to ensure that your mobile date setting on your phone is set to DATA only and NOT Voice + Data.
On an apples go Settings / Mobile Data / Mobile data Options / Enable 4G - Set this to Data only.
You will also need to educate users so that they understand when talking on a call using Wifi calling, if they move out of range of the Wifi calling it will drop the call as it is unable to hook the call to the local mast in the area quick enough.
Hope it helps
With phone calls you mean calls using the regular phone mechanism in cell phones right? So I assume we're talking about WiFi calling. I suppose calling works when you disable WiFi calling on the devices? Is this on Android devices or IOS devices? Are you experiencing this issue with all providers?
Yes, Wi-Fi calling using the regular phone mechanism on the cell phones. This specific location is located in a basement that has very poor cell phone service. I am being told that it is both IOS and Android devices but I will confirm that. I can't specifically say right now if it applies to all providers but I will investigate that.
The problem appears to affect both Android and Apple and does not work even when the phones are placed into airplane mode.
Any other suggestions?
The only thing being blocked on the guest network is video and music. The firewall is a checkpoint firewall.
I assumed that the guest networks traffic was tunneled past the firewall to the meraki cloud and would therefor not be subject to the firewall. Is that not correct?
That is not correct. The cloud connection is an out-of-band management connection. Your user traffic is never sent to the cloud.
This also started affecting me today. Some of my SSID's work for ATTWIFI some do not.
all are bridged. I did not make any changes to the SSID but something else in MDM might have kicked .
we can no longer make wifi calls
Any one have and resolve this problem
Same issue with us. WiFi Calling just does not work over Meraki APs. Buyer beware.
I have had this problem very Recently, where Wifi calling would be un predictable. WiFi Calling sets up a type of VPN connection back to the provider. so Content Filtering or any type of Firewall Rule that would block ipsec or anything blocking or Filtering port 500, 4500, 5061 will break wifi calling. (For example with PFSense you have to Enable PF scrubbing). I have SSID with Internal NAT and my Wifi Calling is working. Issue was my Router.
Is your Router a MX or another Device?
My issue was resolved by correcting an issue with the firewall and no change to the Meraki equipment.
Would you explain?
It is normally the edge firewall that causes wireless calling to fail, we have the same on some of our networks. The same APs on a different, but identically configured SSID work just fine when going through a different gateway firewall.
Haven't had time to fix it yet, but the firewall is where the issue will lie.
Is this due to a recent change? I've been using wifi calling with Meraki MR42's for a year now (currently running 25.13) but have not heard of it not working anymore.
Guess I'll investigate.
In my experience with wifi calling issue its always the Router. The AP just passes Traffic Even in NAT mode.
My router is set to upnp, but I can control the traffic. Earlier last year I did notice such an issue, so it’s not a problem with router I think. Besides I setup on all my iPhones FastLane profile through MDM to ensure the voice and video has always highest priority. I don’t use Meraki router I use instead UniFi router.
@Felippe Is the issue reproducible on demand? if so, I would recommend taking a packet capture on the wired port of the AP. Take a not of the time you got disconnect from wifi calling and check the frames for that particular time. This will give you some visibility if it is the AP or the router.
I suspect the issue is with the router but the packet capture will confirm the behavior.
This is likely related to your firewall, but here's why:
Apple WiFi calling uses a IPSec VPN connection on UDP port 500/4500 to connect the call, it's likely that your firewall is treating this traffic as normal and changing the source port during NAT.
You need to make sure that the VPN settings of your Firewall are set to preserve the connections.
Reach out to your firewall's vendor for assistance.
@WagnerR where would i be able to find this information for vpn settings? i cant do that in the meraki dashboard can I?
In my case it was my SonicWall firewall that needed to be configured to allow WiFi calling to work. It's not related to the Meraki Access points.
If you are having this issue I recommend you look into the VPN settings of your firewall, check if anyone using the same firewall has reported the issue and finally, reach out to their support team if you can't find the solution.
I know this is an old post, but wanted add some information to help those out there struggling. I have used Merak AP's for years and WiFi calling works provided its on an SSID that does not disable LAN access. For some reason, when you create a Guest network and diallow LAN access, wifi calling does not work. Web browsing works fine in this scenario. But on my internal SSID's, WIFI calling works without issue.
I have not determined why the SSID's with Deny LAN block the Wifi calling, but its most likely related to a specific port or service on the internal LAN that is blocked by default in the Deny LAN Access of the guest network.
Meraki equipment is great except for their crazy lead times to get new hardware.
Somehow the guest traffic must be blocking
NFS and PPTP traffic. which is how wifi calling creates a tunnel, this is what I have in my notes, and I fixed the issue when I was using pfsense as my router
All, I ran into this issue myself for the first time today. I have 3 SSIDs 1 private and 2 guests. Guest uses NAT mode. I read all the posts on this thread and (1) kind of worked. Under Firewall & traffic shaping, I set LOCAL LAN access from Block to allow, and I created ACLs to block 172.16.0.0/12, 10.0.0.0/8 and 192.168.0.0/16. After I did that, the problem became sporadic. The guest users could make a call, and about 10 to 15 seconds later the call would go silent on both sides, and sometimes the call just wouldn't connect just like when the problem first started. Here was my fix, that worked for all my sites.
I kept the ACL rules I described above, but instead of letting the AP proxy the DNS requests, I changed Content Filtering from "Don't Filter Content" to Custom DNS, and I issue the Guest 18.104.22.168 and 22.214.171.124.
It worked 100% of the time after that. I don't want to pretend I understand the programing here, but I think that when "Don't Filter Content" is enabled, the AP takes the users DNS requests and makes the request on behalf of the user. I think something gets lost in translation when it comes to wifi calling, and wifi calling breaks. Maybe the @Meraki support team can do something with this information to fix the problem, but this 100% worked for me. I hope it works for you...Good luck out there my friends!