Indirectly - "yes" ? 🙂 Might have been fixed in later releases. Im almost running 15 on everything these days. ... View more

Just had this EXACT problem on a MX85 (both WAN ports). Disabled EEE on the uplink switch, port is now stable. Do anyone know if there is a bug on this ? (its not anywhere in the release notes). ... View more

Or , come to think of it, it would be really "cool" if the DUAL WAN end looked at incoming traffic, and from its probes, it knew that the WAN connection that the traffic was received on was bad, and then "instructed" the Single WAN end to switch to the other tunnel so it would receive all additional traffic on the other WAN. Does it work this way ? Dont know.... ... View more

I've been running multi-VLAN support over mesh at a couple of sites for about 6 months now and it hasn't seemed to cause any issues.  We're not moving a ton of traffic over those links, the primary use is to keep a few multicast audio streams isolated in their own VLAN, but it also allowed us to get a couple of IP phones back into the voice VLAN.   You will need to open a ticket with support asking them to enable it and let them know which repeaters it needs to be enabled on and what VLANs to allow on the mesh.   Russ ... View more

Yes, I agree on that, Instructions are not that clear. However, I got NAT mode enabled for vMX by calling support team. They said, that is the only way for now.   ... View more

following.. ... View more

Ok we can use other ways of user auditing instead then but now how would I get mobile devices (iPhone and iPads) to adopt the cert authentication through the meraki SSIDs. They still seem to prompt for a User/Pass after I have setup the NPS server, set the Radius in Meraki and the CA is working as this solution works just fine on test laptops.    This solution works for out Windows devices but I have read Meraki's solution for the mobile devices and cert auth is as such here: https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Certificate-based_Wi-Fi_authentication_with_Systems_Manager_and_Meraki_APs    That will change the Radius server to Meraki Authentication so then that screws up the solution for the laptops.  ... View more

Sarcasm (sorry) : "Yes ... let me just climb outside on the roof to connect a laptop to port 2 ...." *sigh* this product ... someone did NOT think when they designed these features.   ... View more

Tried to remove the NAT config, save, and reapply. Did not work 😕   So Im waiting in the phone support queue ....   ... View more

I also have to agree here, this is not implemented "the Meraki way" ... ... View more

You'll need to physically gain access to the device. ... View more

Thanks for the info @Bruce .  That is a good feature additional to MS14. ... View more

I was really hoping that Meraki would've had ready templates to make this simple for me but it definitely appears to be a step in the right direction - thanks Inderdeep! ... View more

@MarcAEC i got a quick response from MaxMind, within a couple of hours that the issue should be fixed in their database "next Tuesday" hopefully that means tomorrow. thanks again for your help!     Dear Requester, We have reviewed and accepted your correction for IP range https://protect-us.mimecast.com/s/LNsiCKrG6YS7NBXuMnKkV?domain=192.124.249.0. The corrected data should appear in next Tuesday’s update. We will not send additional confirmation emails for separate corrections (you have submitted) that are accepted within the next 24 hours. You may check whether your correction was applied via our database or web service online demos: GeoIP2 City Database Demo GeoIP2 City Precision Web Service Demo If you have any questions please contact us at correction@maxmind.com. Sincerely, The Team at MaxMind ... View more

Then let us parse it to syslog, anything. ... View more

Yes we have also noticed higher CPU and lower VPN throughput as a result of this issue. There is a note in 16.4 which states "Significant performance regressions for VPN traffic may be observed on MX84 and MX100 appliances" and I suspect this is present prior to this release. ... View more

Uhhhh nice, didnt know you could get support to do that. But that would fix his problem, absolutely 🙂 ... View more

@thomasthomsen, I agree with you, the documentation on using the MX as a wireless concentrator isn’t great, but as @ww stated it’s ‘yes’ to both your questions. ... View more

We use Sophos XGs for our enterprise edge and client VPN, it has an SSL version based on openVPN and an IPSEC version.  There are a couple of dedicated clients (one SSL only, the other for both) and it supports a mix of full tunnel and split tunnel with multiple profiles, 2FA and pretty much any OS including IOS devices, Raspberry PIs and many more.  However their SD-WAN solution isn't a patch on Meraki's! ... View more

So ... I'll just mark my own answer as the solution ... *DOH* ... View more

Ok -.... here's a hint to our problem - Content filtering - When the MX cant reach Brightcloud services (that is not described as required on the "firewall info" page).   I'll just leave this here, and then people can PM me if they want to know what I think about this, the strange way the MX apparently handle this, what you can see in the event log (on any log for that matter) *hint:Its nothing*, and what I think of Merakis support right now. ... View more

Apparently the CDP/LLDP issue with the MX250 and MX450 to them is a cosmetic issue and doesn’t have any real world impact, and won’t be worked on,  that’s just a great answer for a solution I spent a good amount of money.  Never again will I recommend a Meraki solution to a customer. ... View more

We have had a similar issue with a couple of misconfigured sites.  Turned out to be the mtu setting on the path to the site from radius.  The isp’s kit was configured to a figure below 1473. The first packet would be returned by the radius server but the remaining packets of 1500 size would fail. A quick check is a mtupath tool.  Next time it’s happening try this from either end to confirm if this could be the cause. ... View more

Finally!!!!   Absolutely amazing to have the MX100 replaced ... View more