If the LAN subnets exist in front of the MX then a one-armed concentrator is probably what you are looking for. ... View more

Probably buggy behavior but before making a case with Meraki. Check if those users are already authorized. Under wireless-> splash logins you should see the status of that user. Login attempts also shows some info. ... View more

Sounds like browser issue maybe?  I seem to recall having a similar issue before where static IP info I put in and saved didn't take and I had go apply it again. ... View more

Nice find. It seems indeed that accessing the page in the normal way (clicking on the AP in the AP list, or clicking on it from the topology, or clicking on it via the CDP link in a switch) works, but not when going through Wireless Health.   It's caused by these parameters in the url.   t0=1556260467.878&t1=1556264067.878 ... View more

@kYutobi wrote: Just triple checked. That's odd because I could before it was attached to the switch. Thanks for clarification @MarcP    Can´t remember I saw that anytime in the past 😄 😉   ... View more

My issue is on ~13 MR18's, all on 25.13.  No other WAPs on the network (although plenty of others in the building polluting the air).  Hopeful that maybe a firmware update is out there - is there a way to force the beta on, or is that not a great idea with outstanding bugs?   Has been quiet due to Easter, so not sure how the issues are right now - I changed a few settings last week out of desperation.  ... View more

We are go to Run..... ... View more

We use Logic Monitor and I think it is worth looking into. It does a nice job of monitoring/reporting/alerting and has great customization features. ... View more

great idea for surf report!  🙂 ... View more

I have setup VPNs on several firewalls and find that most cannot connect to the VPN from the LAN side.   I also have setup Routing and Remote Access on different Windows severs.  With that config, users could connect to the VPN from the LAN.   A different way to accomplish a Guest Network that has managed access to the LAN, would be to setup an Employee Guest SSID that uses RADIUS to your server for authentication.    ... View more

Thanks . ... View more

Using I, not Hex was the Problem... :S   why isn´t it possible to use the IP? Don´t get that. ... View more

Yes it´s the switches address.   On Meraki switches you can´t see the MAC-addresses of the ports.   On "Cisco classic" switches you can see it by using this command: sh inter {interface name}   regards ... View more

Thank you all. some vlan was mismatching ... View more

Ok, so I did two things, not sure which helped but my problem is now resolved.   1) I added VLANs to the RADIUS server as attributes 2) I re-did the tagging for the VLAN I added to the Company_Secure SSID. So I made a tag called "VLAN16", added it to the AP, and added it to the VLANs on the SSID   The client also had to delete the wireless profile and re-add it before it worked.   ... View more

No problem man. It's these little settings that drive us crazy sometimes.  @MarcP wrote: oh my god, this is so embarrassing :S Can´t remember I set it to 1hour, or even configured it.   Thanks to all.   ... View more

SAML can take you directly into an Org. And if you're a large MSP then I'd suggest you look at SAML anyway 🙂 ... View more

Can you test the port forwarding from the subnet connected to the MX's WAN interface? So basically from a computer connected to the 192.168.1.199 subnet.   Perhaps it might also be a good idea to use a different port than port 80 on the outer side of the MX. While it should work it breaks the local webpage functionality of the MX. ... View more

Complete my initial Cisco/Meraki Express certifications  500-551 passed.  Still waiting on Cisco to get it registered to me. Get my Z3C Teleworker set up at home, replacing the tired SonicWALL TZ100 we've had for years Currently running in parallel for testing.  No difference in performance seen but the TZ100 is not doing DPI, we have a great Ubiquiti 802.11ac access point, and no devices yet that support 802.11ac Wave 2 to use the faster capabilities. Use that to justify increasing our home cable connection bandwidth, since the gateway will be able to handle it On hold; Comcast bumped us from ~ 25/4 to ~65/6 on their own without telling us so no current need. Stream ALL THE THINGS! Hah, like I have time while studying for another test... Update the non-Meraki site tunnel to work (different organizations...  work can't have my Z3C!) Tested but since the home wired network is still using the Sonicwall, not permanently transferred. Update Python to current on the home Alphastation DS10  (running OpenVMS) and work's OpenVMS Integrity servers All my VMS work time is once again on hold due to the sheer number of microsoft windows PCs filling their diapers and squalling all over the ticket boards while the VMS boxes, as expected,  Just. Keep. Working. Use said Python to see if I can get the Dashboard API to work via this unlikely, but endlessly awesome platform. On hold, see above If it works, set up our work VMSCluster to do the Meraki monitoring so we're not depending on some silly PC  (monitoring platform should be as or more reliable than the objects being monitored)   (*) On hold, see above   Wish it was better. ... View more

did a request on this to the support as well... They said there is "absolutelly no chance at the moment" I had to make a wish on this. ... View more

You can scale up to the first 25,000 Meraki devices yourself.  After that you have to get support involved, and engineering have to split it across more than one shard (or you have to split it yourself using more than one organisation).  This document covers it: https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Building_a_Scalable_Meraki_Solution   But in short - you wont be having a problem. ... View more

Absolutelly right... Didn´t noticed that so far, since I have tested it now.   But, thats why it is still in "Beta"-mode   Time for making a wish again 😉 ... View more