What switch is the MR53E connecting to? Can you check logs on that to see if the port is flapping causing the AP to reboot within a few minutes (which you won't usually see on the dashboard). If you contact support they can tell you what the uptime is on the AP in question as well. What antenna are you using? Is it mounted in a good location? Do you see anything in the AP event logs that stands out? Is it using a DFS channel and maybe its detecting radar and then moving away because of that? I would open up a simple wireless scanner near the AP and just find the cleanest channel on 5GHz and hard code that in personally. What are the data rates that you have configured on the SSIDs for the devices that do not see it at all? Those devices may only operate on 802.11b. Or if the AP is on a DFS channel, the clients may not support those channels. Safest bet is to use UNII-1 or UNII-3 bands. (36/40/44/48, 149/153/157/161) ... View more

I would not hold my breath.   Here are some links relevant to the subject:   https://meraki.cisco.com/blog/2018/03/wi-fi-standards-on-the-move-again/   https://community.meraki.com/t5/Wireless-LAN/WPA3-announced-Does-Meraki-have-any-plans-to-include/td-p/8945         Even if they did come out with a firmware upgrade for specific models that could in theory support it, say tomorrow, it won't do you any good. I don't know of any clients that support it. The only enhancement I'm personally interested in is OWE and thankfully that mostly software not hardware, so I see that being something that can be easily pushed. However it is an 'optional' thing for WPA3 which is stupid, so vendors are not required to provide support for it. The only one so far I'm aware of is Aruba. I would honestly be shocked if Meraki doesn't provide it, but they also don't provide IKEv2 for the MX so who knows lol.   This whole process is going to take years, not to mention having to go through all the bugs along the way. There will be many I'm sure, and I have no interest in being on the front lines lol. ... View more

Packet loss not being 100% leans me to thinking its an issue with Layer 1 somewhere along the line. Do you get packet loss from the switches directly (taking out clients from the equation). Do any of the ports show CRC errors or anything like that? ... View more

Shot in the dark here but have you tried testing while not directly connected to the MX? Also, your client isn't by any chance white listed? ... View more

Outside of the time specified, everything results back to default (or non-group policy mode if you will). So if for example, you block access to Facebook as a default setting. However you want to allow it for 1 hour (lunch break), so you create that group policy that basically mirrors your default, with the exception of allowing Facebook. You allow it only during a 1 hour lunch period, so then the device will be able access Facebook during that time period. When the schedule ends, the group policy is no longer applied and they will no longer be able to access Facebook because your 'default' settings have it blocked. ... View more

When you swapped from 1.1.1.1 and 8.8.8.8, I have experience with AT&T Internet service where 1.1.1.1 won't resolve, so I had to use 1.0.0.1 instead. For some reason they blocked in and/or their hardware was improperly using 1.1.1.1, so I would ping it and get 1ms response time (which is basically saying its pinging the provided AT&T router) so I knew that wasn't right. Once I changed to 1.0.0.1 I started getting realistic pings of like 20 or 30ms and everything started working. Not sure if your using AT&T, but it might be something worth checking out as well. ... View more

The access points acts as the gateway, dns etc. So the client will only see 10.128.128.128 Check the access point itself, what DNS does the AP get? That is the DNS that the AP will use via proxy for your guest. Unless you have the SSID access control overridden via Content Filtering which allows you to specific custom DNS. Try the TOOLS page on the AP in question and see if he can resolve DNS out to the internet etc. ... View more

WOW time flys when your on vacation lol. Thanks again although I honestly feel like I barely contributed this past month =( ... View more

Not sure if this is really relevant on the Meraki forums lol, but, well, off the cuff...if the networks still need to communicate, then using an ACL would in theory block communication between them (assuming the ACL is blocking the entire vlan/subnet). With security groups I would imagine you can leave communication between the networks alone, but isolate it per group so that user1 can converse, user2 cannot etc. ... View more

Correct Phil, however I think he is under the impression its bytes not bits. Putting 5 there represents 40 Mbps because 5MB/s does. He needs to put 40 to get 40 Mbps is what I was getting at. The lower case 'b' makes the difference, but they should just replace the '/' with the letter 'p' so its not confusing ^_^ ... View more

Just realized where you got your numbers from. Your confusing Mbps and MB/s The dashboard using Mbps (so if you put 40 for 40Mbps, you'll get that). 40Mbps = 5MB/s which is confusing on the dashboard. They should really just put Mbps instead of Mb/s.   *EDIT - So what you want to do is put 40 for download and 5 for upload. Hit save. ... View more

I've testing this in my lab and if I set the WAN 1 to 7Mbps up and down, it does limit it when I do speedtests out to the Internet. So it works for me. However, I'm a little confused as to why your limiting it to 5down/0.625up because that is terribly slow. That would cause 'all' traffic to go out at those speeds, which would mean its basically unusable. Your pipe appears to be 100down/10up, if you put a cap on WAN1 at 40down/5up then it 'should' work. Are you utilizing the other 60 down/ 5 up in some other way? Otherwise I fear that its going to sit there unused no? ... View more

I might be missing something, but I don't think you need to port-forward if your have a tunnel setup already between the sites. You should be able to reach devices between the sites. ... View more

You need to configure the access-control setting for each SSID to have the VLAN you want it to have via the Bridge-Mode option. You'll see an option to use VLAN tagging, so enable that and then you can choose what VLAN ID to use. Then when a client connects to SSID1, he'll get put on whatever VLAN you have setup. You will need to ensure that the ports that each AP connects to has all the VLANs allowed. ... View more

If you have AutoVPN tunnels then you should already be able to communicate with the other site no? ... View more

Further review it seems tied to being browser based. Maybe an unwanted extension, ads etc.. Being classified as a PUM "Potentially Unwanted Modification" by a security buddy of mine. https://www.threatcrowd.org/domain.php?domain=bfmio.com ... View more

Quick google search is showing this as a malicious item, some sort of browser based adware/virus. You will want to get your computers scanned/cleaned as they appear to be infected with this. ... View more

Same issue here ... View more