https://blog.webernetz.net/network-time-security-strengths-weaknesses/ ... View more

Hi @Seshu ,   There are a fair number of posts here on the community with people having problems with Client VPN. I don't think it's any secret that the Meraki docs don't cover every aspect of troubleshooting client VPN, especially on Windows. I think posts like this, and scripts created by people like @Nash are tremendously helpful to people who are trying to Google solutions.    And no offense, but we all know that making a wish is mostly likely one of the slowest ways to get something added/modified/changed.    🙂 ... View more

The API may work here, but something to consider. The API changes and in all honesty breaks certain times. My trust level with that in this situation would be kind of low. You are looking for more of a set it and forget it solution. In that case I would use the logoff url from the whitepaper to test. Then in a windows logoff script have it visit that page or on a scheduled interval (60mins) ... View more

just an update, I havent changed anything since we last conversated. The s2s vpn established randomly for a few hours and then drops again, I have no clue what is happening at the moment ... View more

I registered to the session, got a confirmation email saying that I registered, and that I will be contacted in 48 hours, but so far no email confirming that I am enrolled to the session. 1. I used my organisations email address, not a yahoo. ... View more

Thanks ... View more

wrt to traffic shaping -- now that's an idea.  In some ways, 'ip dhcp snooping limit rate 25' is a form of traffic shaping, however crude:  allows a given AP (or, more precisely, the clients behind it) to emit no more than 25 DHCP Requests in a given second, and then shuts them down cold.  You're suggesting a more sophisticated approach -- perhaps permit 20 DHCP Requests every second forever, as an example.   Thank you -- I hadn't thought of that ... View more

Might check some of these resources   https://documentation.meraki.com/MX/Client_VPN/MX_Security_Audit_Failed_-_Recommended_Steps   https://documentation.meraki.com/MR/Other_Topics/PCI_Compliance_with_Meraki   https://documentation.meraki.com/zGeneral_Administration/Privacy_and_Security/Privacy_Concerns_and_Regulatory_Compliance_with_PCI_and_HIPAA ... View more

I would make a batch file with the following commands to run, then run as administrator-     netsh wlan delete profile name="xxx" interface="Wi-Fi" (where xxx = duplicated wifi name, copy/paste for all duplicate instances) netsh int ip reset netsh winsock reset shutdown -f -r -t 5     It's definitely a Windows issue. On the machines that you're seeing this on, is there OEM wireless software installed? On Dell laptops there's a ridiculous OEM program called "Dell Unified Wireless Suite" that has wreaked havoc for me on occasion. I always remove any OEM wireless software and just force drivers only install. ... View more

Thank you George.   Reopen the ticket and request Meraki support to forward the case to you.   Updated. Thank you again George for review and approved the case, the new unit received and installed. The defected unit has sent back through delivery pickup. ... View more

This is a great discussion. 75 is a lot but glad you are able to at least use one of the noted solutions! ... View more

Have you by chance enabled "Dark" mode which turns off the LED? https://documentation.meraki.com/MR/Other_Topics/Run_Dark_Mode    ... View more

Different VPN software on the client, like Sonicwall or something your previously used? Also AV or Endpoint security software could be causing the issue? virtual adapters could cause issues and should be removed. ... View more

@charles07 just VPN in as the user.  After about a minute you should see the VPN connected user appear under Network-Wide/Clients.  Then go apply the group policy to that client.   Unlike other clients, it gets applied to the client VPN user, not their IP address. ... View more

I had a Meraki trainer say that something like 40% of all support tickets are related to licensing issues. This is a really common scenario, so I suspect that your step 1 will get you sorted, @FahadND. ... View more

My team lead is a very good wireless engineer, and she has done preemptive surveys exactly as @BrechtSchamp describes. The folks building the warehouse should already know where everything is going, including matters such as shelf height, positioning, materials, what's being stored there, etc. ... View more

The most irritating case I had to deal with, at a world leading institution, as far as connectivity was concerned involved the following steps. Accepting that the Z3C was not going to connect to the LTE signal from where I was set up. Accepting that the institution's WiFi service was more krap than anticipated, and that the IS staff "didn't give a damn". Walking into the corridor and standing under the krap WiFi AP and cycling through the available SSIDs until the phone established a functional connection. Returning to where my laptop was set up and then tethering the phone so the connection could be shared (mostly required several repeated attempts, returning to the WiFi AP, restarting the phone) Whistling Dixie (doesn't always work) Much rolling of eyeballs Voila! - functioning Internet connection. There was another alternative: packing up all my kit and going and sitting in the cafeteria used by the IS staff, instant connectivity that functioned 24/7. Such is life ... View more

Following up. The Netgear device is model No. C7000v2, which is called “AC1900 WiFi Cable Modem Router.” ... View more

I found the reason for getting one MAC-Address only - I switched the network from "Cloud Track" to "MAC address" and now I see the 2 addresses who cause the conflict. Solving the IP conflict message is up to the vendor of the acting devices (or meraki to mark some messages as expected without sending an E-Mail out). To stop the flood we disabled the IP conflict alert again.   ... View more

@AlexG7  Isn't the MAC address reported in Air Marshall the BSSID MAC address of the SSiD it's seeing ?  That's a variant of the physical mac address of the AP that's broadcasting it.  The algorithm to work it out is based on the radio band, the mac address and the model of the AP   More info here on how to work it out https://documentation.meraki.com/MR/WiFi_Basics_and_Best_Practices/Calculating_Cisco_Meraki_BSSID_MAC_Addresses ... View more