Another way to troubleshoot that under a minute.   Take a packet capture.  Run your tests / calls  Sort all the conversation without any packets from B -> A ( B = destination , A  = your source client ). Which means the firewall was blocking the outbound packets. ... View more

Thanks @AdamS I'm checking this out.  ... View more

Hello, Here are few solutions you can try:   If you're behind a proxy, configure your proxy settings for pip. Try upgrading pip itself using python -m pip install --upgrade pip and then attempt the package installations again. If the issue persists, consider installing the packages by specifying their direct URLs or using a different network environment. ... View more

Really?, wow that is not good then.  It doesn't matter too much for me as we send traffic from guest subnets over WAN2, it was more to limit the bandwidth from guests on WAN1 when WAN2 failed. Yet again, another reasonable feature that's not available on the MX, it does make me question whether the MX is really fit for purpose as a firewall. ... View more

Set a non existing vlan on the default port config. Configure secureport. If an AP is connected the port will be configured on a trunk port with the desired vlans , else the port will be an access port with the non existing vlan which will prevent any authenticated user ( via 802.1X )  from using that port ,even if the user is 'legit' ... View more

Nothing like a bit of competition to drive improvement! ... View more

Ahhh finally!!! Thanks for sharing 🙂 Yeah, roll on the same info for MT etc. although I see MR is due imminently...     ... View more

Hi Again, Thank you ww and RaphaelL for your messages. Comparing the working sites and the not working one, I noticed following case which I am not sure if it is causing the issue. Note : We have dual ISP (Uplink) secnario . On the Spare Unit, I have WAN 1 and Wan 2  WAN 1 Status is " Failed " Wan 1 IP address is not in the same subnet of spare unit device Public IP (It is in the same subnet of the Primary unit Public IP) Wan 2 Status is " Active "  Wan 2 IP address is the same as spare unut Public IP.    Now in the working site same situation (Dual ISP/Uplink)  The Spare unit WAN 1 IP address is in the same subnet of spare unit public IP address . I guess in the Spare unit the WAN1 IP address and the Public IP address of the spare unit need to be in the same subnet .    Please let me know if you need any further information.   Thank you for your time .   ... View more

I would create a NPS connection policy just for the HQ access points and add a MTU entry (try different MTU packet sizes) within the connection policy just for the HQ.  whatsapp mod watch tv series ... View more

Yes the .99 builds are the beta for a new release to check basic functions before going public, they start as more of an alpha, though it is mostly just 30.5 now. ... View more

Wouldn't selecting these vlans and put them 'vpn off' already solve that issue ?     ... View more

That's it, iPhones but it's funny how some don't change at all it seems. ... View more

Working for me again as well. Thanks!  ... View more

Thank you so much. 🖖 ... View more

@RaphaelL / @Air-Marshal the post Philip linked to is in a forum that can only be accessed by Cisco partners. I'll assume that since Philip linked to it here he's fine with having it available publicly (but @PhilipDAth please let me know if this isn't the case!). Copying it below (all credit to PhilipDAth of course):   While stuck in traffic driving to the Cisco partner appreciation event this afternoon I suddenly hit me how to make the MSP dashboard dynamic. Basically create an html file on your machine using notepad based with the content below.  You could call it "monitoring.html" for example.  Now go to the current static MSP dashboard.  Getting it looking how you like (filters, etc) and then copy the URL into the url variable below.  Save the file. Then simply double click it.  You'll probably get a warning about it trying to open up a pop-up window.  Tell your browser to allow this permanently. It works by opening up the Meraki dashboard to the URL you have given.  Then every 60s it closes that window and opens it again.  I know, a bit of a hack but it works.  But at least it means we can have a "heads up" display and dynamically see customers with devices that have an issue.   <!DOCTYPE html> <html lang="en"> <head> </head> <body> <script type="text/javascript"> var url="https://n85.meraki.com/xxx/msp_portal#t=network&q=(status%253A%2522alerting%2522%2520OR%2520status%2...)"; var merakiWindow=window.open(url); setInterval(function() { merakiWindow.close();merakiWindow=window.open(url); }, 60000); </script> </body> </html>   ... View more

I don't see any routing issues in this case. Which suggests that it could be something on the server or some blockage on the network. I suggest you open a support case. ... View more

This can sometimes occur due to differences in how data is processed or presented.   For the VRRP events, it appears that the API is returning the same events as the dashboard, but with a different description for the ‘vrrp’ event. This could be due to a difference in naming conventions between the dashboard and the API. VRRP, or Virtual Router Redundancy Protocol, has various parameters and events associated with it.   For the BGP events, it seems like the ‘All BGP’ event is missing from the API. BGP, or Border Gateway Protocol, is a complex protocol with many possible events. It’s possible that the ‘All BGP’ event is an aggregate event on the dashboard that doesn’t have a direct equivalent in the API. As for the different results when querying a combined network versus a standalone appliance network, this could be due to differences in the network configurations or the types of events that are relevant for each network type.   The missing DHCP event types could be due to a variety of factors, such as network configuration, client settings, or even issues with the DHCP service itself. The “weird” event types you mentioned, such as ‘network_test’ under ‘Route tracking’ and ‘events_dropped’ under ‘Events dropped’, could be specific to the system or network you’re working with. They might represent specific events or states that aren’t commonly encountered. ... View more

Meraki switches typically retain event logs even after a reboot. These logs are crucial for troubleshooting and maintaining network security. However, the duration logs are stored may depend on the switch model and configuration settings ... View more

I*m not completely sure if this is a bug, because we've alsp noticed this on one of our customers last week, where they have begun experiencing lots of disconnects from the wireless network. We have an open case about it, but so far haven't gotten anything specific yet.   However, I haven't heard any reports since we suggested the customer to forget the network and reconnect (delete the connection profile). ... View more

Wow that was quick ! Thanks a lot ... View more

Annnnnd make sure that your licence are not expired ! Been there. ... View more

This is exactly the main part of the problem ! ... View more

Hello, thanks for your replies. This is really interesting, especially @MartinLL 's SNORT investigation. After disabling IDS I had no route change events and network outages since 10 days. This is the longest period of time so far since we started working on the problem. Hopping that we got rid of it, I think.I can do without IDS. ... View more