Could you clarify with screenshots what it is exactly what you are looking at? If you mean the bandwidth used on the AP total is possible since the AP itself also needs uplink monitoring and config pushes and telemetry pushes.  But it is not clear what you mean. ... View more

You can't enter this on your pc. If you're doing MFA you need to have MFA setup on your mobile phone and accept the connection there.   But why on earth would you want to do MFA for Wi-Fi. This means everytime you do a slow roam you will be prompted for MFA before being able to connect to an AP.  This will be the best way to get all your users to draw pitchforks on you.   Don't ever do MFA on Wi-Fi. ... View more

It's a switch, not a network analyser 😉  You need a host to the capturing. Agreed there are cloud captures now but these are short in duration. Continuous captures always require mirroring to a device dedicated for the capture. ... View more

Correct! It's just on my home network and I like to try new features 😉 ... View more

Your existing switch will just spew the frames out it's mirror port and those frames will be received by the MS switch.  So if you want to receive those frames you will also have to set a mirror port on the MS switch and connect your analyser on that port. ... View more

A download is downstream, traffic comes via the ISP into your connection before any shaping so you don't have any control over the downstream path.  Upstream is a different piece since there you go from high bw to low bw. And of course you have to make sure your packets are matched and tagged with the correct DSCP value.   By default all your upstream will indeed hit the normal queue and that queue can borrow from the high queue if nothing is in it. If your circuit is direct internet access the only way to shape your downstream traffic is to have a router in front of your MX and do some random dropping inbound and shape inbound traffic to a little lower than the actual pipe of your ISP. ... View more

A customer of mine also had a stop of traffic from Azure vMX to the branches.  The VPN's then showed a grey circle.   After a simple reboot appliance the tunnel resumed operation after 2 minutes. ... View more

If the logs say the authentication is valid, then you still need to check the authorization. You can verify what the radius server is sending to the AP by performing a pcap on the wired port of the AP in question on port 1812 and see if you get an access accept or access reject. ... View more

You don't need to calculate yourself. On the traffic shaping page you must define both your WAN circuits down and up speed yourself. The MX will then calculate it's high/medium/low queues accordingly. The MX has 4 queues: Real-time (PQ): this queue has no defined limit in the documentation but will service any incoming traffic with DSCP EF instantly. High bandwidth queue: 4/7th's of the configured WAN bandwidth. Medium bw queue: 2/7th's Low bw queue: 1/7th.   So make sure if you make your rules that you also set the DSCP value which is important for the audio applications found inside the voice and video conferencing application group. ... View more

Well when the phones were off the Meraki network, did you manage to take a pcap of the phones there. - Boot process (getting IP) - Registering   There are a multitude of variables why the phones act like they do. Have you opened all necessary ports outbound according to the documentation of the vendor.  In that different network were they also behind a closed firewall. ... View more

Yes very weird. Try entering 1-4094 and then the pencil will appear. When you save it will  read all again. For some reason you cannot type all. ... View more

There is no concept of outbound port forwarding. The only thing the MX does is first create an outbound flow between your phone and the external server and perform SNAT on the packet.  (so the source IP of your phone is translated to the WAN IP on the MX)  Destination address is unaltered.  It is the job of the phone to make sure it has the correct destination IP of the SBC it has to register to.  The only thing you can manipulate is the outbound WAN circuit for that traffic.   SIP ALG cannot be an issue since the MX simply does not implement it.   I also take issue with the explanation of the phone provider.  Proxy authentication required logically seems like the phone setup has not been done correctly and has nothing to do with possible packet loss.  Proxy auth would be that the phone cannot directly authenticate using that server directly but has to go through another device.  If that is not the desired behavior, then something is wrong in the config of the phone system. ... View more

I haven't yet.  I assume it is simply the API key that it will export to Ekahau so you can directly import your survey floorplans to dashboard (you still need to rotate and scale the floorplan according to the satellite image).  But your AP's will already be there if their name fits the survey file. ... View more

In PDL you don't have to care if a license has expired.  It is more important to look at the devices.  Previous licenses that have expired stay visible in the portal. If a device is no longer licensed it will be clearly shown on that device with a red date.  Then you need to stack a new license on top of it.  However PDL licenses never seem to actually stop your network from working.  But you can't move the device to another network if it does not have an active license. ... View more

Check if the AP is sending out a Meraki setup SSID. If there is, try to join it and you will be redirected to the status page and you will see the what could be wrong. ... View more

We're using radius as a service with scepman for our networks but I don't believe these two are related. ... View more

Dashboard thinks 2.4GHz is irrelevant 😜 ... View more

I tried to enable it but I only got the same page as the MS switch capture page. So not the cool management frames proactive intelligent captures that what I was expecting.  Am I missing something? ... View more

It can be deceiving that the stacking ports of an MS switch are in fact QSFP+ ports.  But I believe the software will not allow a link to form.  Correct me if someone has actually tried that with succes. ... View more