I really think that you have to go with the SD-WAN plus licence to leverage the SD-Internet ( https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MX_Security_and_SD-WAN/SD-WAN_Internet_Policies_(SD-Internet) )    You would then choose O365 from the Major application list. ... View more

Just installed a USB wireless NIC :        Will be trying that for a couple days. ... View more

We haven't raised a ticket with Microsoft since we had 0 clue where the issue was. On the client or on the AP. But we will probably open one ! ... View more

No haven't tried PMK caching disabled yet.   Don't know how to view the TCP IP lib version 😞  and the drivers is 22.170.3 but I have tested the latest 22.200 without success. ... View more

Hi Melchi ,   All our machines are from HP and they all are using Intel NICs. I had confirmed in the past that AX200 and AX201 were having the same issues.   We also have BYOD devices on that same SSID eg : Samsung , Iphones and so on. I wasn't have to confirm if the issue is present , but I suspect that it is working fine. I will be testing next week with the same laptop but running Win 22H2 instead of 21H2. ... View more

To be honest , my wireless knowledge is pretty limited. Learning everyday , I assumed that multiple PMKIDs are a problem. Well in my case everytime there's 2 , the AP sends a de-auth. Is the client sending the 'correct' PMKIDs ? Good question ... View more

Update !!    Hi, Yes, they were able to reproduce it in-house. Our understanding so far is that the intel NIC seems to be sending 2 PMKID values to the AP during the re-auth period, since the AP is only expecting one, it leads to the AP sending a de-auth to the client.   I'm guessing that @Melchi  is either a Wifi guru and/or is working actively on my case 🙂 He was spot on ! ... View more

Anddddddddd it's gone ... View more

Even better 🙂 ... View more

It should scale per network or something like that.   It doesn't make any sense that a large Org like us ( 2K+ networks ) have the same rate-limit as the small enterprise that has 1-2 networks. ... View more

I'm now 1000% lost. Same issue with MR28 :  It seems that once the network is upgraded to MR29 , doesn't matter if you rollback to MR28 , you are stuck with it.  I have over 500 networks and most of them have 0 'EAPoL invalid MIC' logs. But another network was upgraded to MR29 and then rollbacked to MR28 shows the same behavior.  I can see very few logs on MR28 networks with the same error.      EDIT : The M2 that is failing ALWAYS contains 2 PMKID. Then the client only sends 1 PMKID and it works...  That's curious.. ... View more

Hi ,   You can't really see the BGP neigbhors status from the dashboard. You can check the Event Logs "BGP session established" , " BGP session no longer established" , "BGP sent notification".     You can also check the routing table to see if you have learned some eBGP routes. Taking a packet capture to see the BGP keepalives can also be a way to confirm the status. iBGP is between the spoke and the HUB and eBGP is between the HUB and probably your DC ... View more

Hi @Melchi  ,   1- PMK caching wasn't disabled at any moment during the tests on either MR28 or MR29 2-  This is the EAPoL Message 2 , right after that the AP responded with a deauth   3- Yes this is what I'm curently trying to achieve 🙂      Thanks for your help ! ... View more

What version of MX / MG are you running ? And what is the MTU that seems to be used ? ... View more

Only this version or any version from the MS 15 branch ?   I'm not aware of any issue with MAB currently sorry. ... View more

Setting the RPI with a USB dongle wasn't too hard.     Correct , support had to rollback to MR28 ... View more

Support has not suggested to upgrade to MR30 since there are no fixes associated to my issues. The pcap was taken on a RPI in monitor mode since Intel wireless cards do not support monitor mode. ... View more

Hi ,    I don't see that snippet in the link you refered.     1- We are running Win11 and not Win10 2- 802.11W is not enabled 3- Everything works fine when downgrading to MR28 , how can this be client side ? ... View more

From my experience downgrading to MR28 fixes the issue ( with or without 802.11r ). Will be trying this with Support this week. ... View more

Edit: Either someone saw my post and they did a commit to the dashboard code or someone opened a case and they fixed it.    The options are now visible via the dashboard.  Already submitting a bug related to that but anyway the options are visible ! ... View more

MS Client Sampling on Uplink Configuration Change: Added information about "Update Client Sampling" UI option.   This was a backend option in the past. I have created a new network , but the options are still not visible on the dashboard. Is this GA ? ... View more