Yes. But that wouldn't specifically address the OP's scenario of wanting to use WAN 2 for Guest while WAN 1 is up, but then deny it when WAN 1 is down.      That feature would work as long as the OP wants Guest to use WAN 1 normally then deny it when WAN 2 is active. ... View more

after more investigation it seemed the issue is more on the switch side rather than AP. we had to upgrade our MS150 switches to MS 18.1.3.1 firmware. this is beta firmware so there could more underlying issue. However since upgrade its been stable. we have not tried wifi7 yet. ... View more

Historical views are only available for clients. As long as that client was not seen on another port it will show the client as being disconnected and on that port. So you could go to networkwide -> clients and make sure the switch and switchport column is showing and try to find that port. ... View more

MLO doesn't need three bands. And most clients only use two bands for MLO. If I remember right, the Qualcomm client chip can do three bands, but most mobile devices don't. For the CW9171: Is that device already shipping? I would expect that it will be supported natively in Meraki when available. ... View more

I wanted to block wireless only clients from talking to each other. But wired to wireless should communicate (Like PC on Wi-Fi to Printer on Ethernet). If I turn on Layer 2 LAN isolation, the printer becomes unreachable to wireless clients. ... View more

I've done some further testing with a MX105 as a concentrator and CW1196I AP, I still get 250Mbps throughput when the SSID is set to "Layer 3 roaming with a concentrator".  This leads me to think the SSID tunnel must be shaped on the MX, I've raised a case with Meraki support to see if they can confirm. ... View more

Hi Glden & Mloraditch,   Thanks for your reply. After reviewing some documentation, I believe that the current Meraki solution has difficulty fulfilling this requirement. Thank you for your sharing your idea again. ... View more

You can do this WITHOUT a MCG. You can tunnel SSIDS to an MX directly as long as the MX is in the same org ... View more

Combing through the wireshark log - I determined that I need to separate out more of my traffic.  The ports look like they are being flooded by other traffic than my voice vlan traffic.  I created a test vlan and tested it on a handful of phones.  Those phones stayed in the voice vlan and have successfully stayed connected.  Thank you all for your help and support. ... View more

These switches always run IOS-XE in the background and I would recommend going over to IOS-XE version. If you are still running CS17.x then you are running IOS-XE but with a container running on the apphosting part of the switch to translate your config. The reason I say this is that when you run IOS-XE without the container you will have access to the CLI via dashboard cloud cli.  And when plugging in your Cisco DAC cables you will be able to do show inventory and show interface to see your DAC cable will work just fine 😉 ... View more

Indeed, only the primary configured WAN is listening for the Client VPN sessions. It does take some time for the DDNS to update. You can however test this when doing an nslookup how long it takes for your to get the other IP address. You can also test the absolute WAN addresses by checking dynamicname-1 or dynamicname-2.dynamic-m.com ... View more

What does Wireless Health report?     ... View more

That depends on the license model. In case of co-term, every switch must have the same tier. In case of subscription you can mix and match between networks. I'm not sure if you can mix within the same network though. I can't seem to find an obvious answer in the documentation yet 😉 ... View more

Woops, didn't catch that 😉 Well I don't have a big problem with the default 30 port view but I do understand that many switches are 48 port so a default of 50 or 75 would be better. I do however have an issue with the maximum limitation for 200.  Because when you want to make a bulk change to over 200 ports you must remember to select them on all pages before pressing the edit button.  And yes that is after filtering ports based on a tag. ... View more

Hey we have several customers on very large deployments already, and more preparing for deployments in the next couple months.  Lots of early success. ... View more

One thing that does worry me, the Meraki's are running RSTP and the Catlyst C9300 (which are the core for some of the sites) are running MSTP (This was confirmed by Meraki Support).  Therefore even though my VLAN is only used on the P2P link, will it still be calculated in the STP algorithm?   I did hear that RSTP (and potentially) RPVST are coming out soon for the Catalysts (I am managing these via the Meraki dashboard).     Thanks   ... View more

We are also going to fiber run some Harden switches in the Feild. Will those have the same interface. since there will be TV's that need to talk to that Savi server on the TV Vlan. ... View more

The design where you have SD-WAN via 1 interface and then use a private WAN solution and route via a LAN port of the MX will work but without SD-WAN features. This means the MX will always route over the LAN port unless that route is no longer available. So you can have a ping probe from the MX that will keep the static route alive. So yes you will having routing via the E-LAN but you want be able to route based on latency, jitter, loss as you would if you would have if you connect the E-LAN to the WAN2 port.  So if you can have one E-LAN terminate at a location with a router to the internet to have your VPN registry connection then you could do a true SD-WAN. ... View more

Good day!    C9300 series running in "Meraki Mode" (CS 17.x.y.z firmware family) behave just as a regular MS family switch with regards to Netflow.   Our MS Netflow document explains you can basically configure the Collector IP and port , which in your case is your Solarwinds NTA service IP and port.   Now, to your point, I agree that the Cisco page doesn't say anything about where the traffic needs to come from; however, Netflow analysis doesn't send traffic back to the devices. Instead, netflow server consumes and process that data and then generates usage graphs and reports.   @eroche , are you trying to find which IP address belongs to Meraki Cloud so that you can identify them in a netflow usage report?   Looking forward to your input on this.   ... View more

It has happened before that the name registration takes a while.  Like 30 minutes or so. Usually the first time a MX network comes up the dynamic-m address is available within a minute. Always make sure you test different dns servers. If it still doesn't work, you can try by disabling and re-enabling the feature on the MX status page.  Or by changing the name. If that doesn't work then you'll need the good ol' support. ... View more

I'm curious since TLS decryption is available on C8xxx routers in SD-WAN that they will once again try to make that available in MX mode. ... View more

I'm not sure how 17.18 handles it but in 17.15 the Meraki numbering is totally disconnected from the Cisco numbering.  So you could have switch 1 be switch 4 in IOS-XE.  In that version at least you can't renumber your switches on the Cisco side so I'm not sure how it will  handle the modification. ... View more

Yes performance numbers much less than expected especially for being a hub for an SD-WAN solution. Also the list price at $42,000 is a lot more than the $30,000 I was told to expect this summer. ... View more