I was affraid of this..  Thinking outside of the box. Any suggestions? I read here on the community that someone has put a L3 switch in between?    ... View more

*Update* It seems as if the 1:many nat rules are working. I can reach internal websites and RDP sessions on the public addresses.   Is There any way to outbound NAT on Meraki? Packets are getting the 192.168.99.2 address which makes sense because the mx only has inbound nat rules.   Any ideas? Support is not really catching on and asked me to make sure the provider could allow icmp and dns...    Cheers, Ben ... View more

@Adam  with my laptop I can reach the .1 but I can't get any further than that.  IP configuration on the MX it's uplink is the same as it was in the laptop   The MX is online with WAN2, but I always configure this through the local page in case it goes offline.   @PhilipDAth Ok, this is exactly what I thought.. I'll get back in touch with the provider to figure this out. His quick Google skills made him email me to use 1:1 nat..   I'm not sure if they are willing to change their /31 into a /30. This is a ping from the provider his side towards the MX250. Pings are responding and OK But the other way arround it does not work.  1921_rtr1_access_AJD#ping vrf VO-ISP 192.168.99.1 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.99.1, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms c1921_rtr1_access_AJD#ping vrf VO-ISP 192.168.99.2 Type escape sequence to abort. Sending 5, 100-byte ICMP Echos to 192.168.99.2, timeout is 2 seconds: !!!!! Success rate is 100 percent (5/5), round-trip min/avg/max = 1/1/1 ms c1921_rtr1_access_AJD#sh arp vrf VO-ISP Protocol Address Age (min) Hardware Addr Type Interface Internet 192.168.99.1 - 881d.fc17.9da1 ARPA GigabitEthernet0/1 Internet 192.168.99.2 0 e0cb.bc07.8c72 ARPA GigabitEthernet0/1     ... View more

I have stacked switches on MS 10.26 and it's working fine, no experience with stacks on 10.29 but I would say try 1 and revert to 10.26 if you have got issues.    For the unstacked switches, i'de say go for it. I'm usually running latest firmware and very often beta firmware in our office network and have had no issues so far.   cheers, Ben ... View more

@jdsilva   I'm think you are right. For the MX devices the Client VPN is just a "local network".  I think the important part of the configuration is on the NON meraki peer since it needs a route back to the MX for all your subnets if this does not work when including it.    EDIT: quick Google search: I think you are looking for this   https://www.willette.works/merging-meraki-vpns/     ... View more

Haha wonderfull when BETA fails at the form 😃    ... View more

We just have a setup with the MX250 with twinax cables between the switches. Works like a charm and looks very clean!   Cheers, Ben ... View more

Can u try and put the SSID in Dual band operation without the band steering and see how the devices respond to that? A technician I know told me that they get different (and better) results in their site surveys if they disable the band steering option that came with the new firmware. Cheers, Ben ... View more

@DenisJaworski   Can u also tell us what the SSID and radio settings are for that network?    As WW suggested this might be due to insufficient coverage for a certain area for those devices. Are you only seeing this on the Galaxy devices? Perhaps lower the Bitrate on the SSID? (not sure on what it's set now?)   Cheers, Ben ... View more

Perhaps we can all start submitting daily wishes into the dashboard "IkeV2" ... View more

Cleanup time with a client who we switched to a fullstack.  Since the rack was in the storage area of the café it got a bit forgotten you can say...    Before:    After:                                                                                                  Also replaced the old server room rack.  Old:                                                                                                 New :                                                                                                     Cheers, Ben ... View more

The way I would set this up   Corp-WiFi :   VLAN 1 (eg: 192.168.1.0/24) Guest: VLAN2  (eg: 192.168.2.0/24)   Put the Chromecast on the Guest WiFi with a static IP (eg: 192.168.2.200) and allow the clients from the corporate network to communicate to the Fixed ip from the chromecast and the other way arround.  But make sure you put a Deny on all other traffic coming from the guest VLAN towards the Corp network and back.   If you are working with Meraki DHCP this is not possible since 2 WiFi clients on Meraki DHCP are not able to communicate with eachother   Cheers, Ben ... View more

Thanks for the feedback!   This is something I was thinking as well. That the Playstore sees this as a App you have in your account. In the play.google.com/work part you can unauthorize the app and after doing this it dissappeared on the device (huawei).    So I think we have to manually remove the app from the Google account as well as deleting it from the dashboard. In the version 2 of the system manager dashboard you can sync AFW apps. When unauthorized the app does not reappear in the dashboard anymore.   Cheers, Ben ... View more

@PhilipDAth  i've simulated this on my dashboard as well.  Have you seen anything like this with your clients perhaps?    Cheers! Ben!  ... View more

Called my sales rep and logged a ticket. Curious on how they are going to respond at support.   Will keep this topic updated.   Cheers, Ben ... View more

Guys any idea if IkeV2 is available yet?  Cheers ... View more

Hi @JoergT,   You can find all the info about the API in the documentation.   https://dashboard.meraki.com/manage/support/api_docs   Think you need "Return a switch port", but they do not send all the info you need. See sample response below.   SAMPLE RESPONSE Successful HTTP Status: 200 { "number": 1, "name": "my port", "tags": "dorm-room limited", "enabled": true, "type": "access", "vlan": 10, "voiceVlan": 20, "poeEnabled": true, "isolationEnabled": false, "rstpEnabled": true, "stpGuard": "disabled", "accessPolicyNumber": "asdf1234", "linkNegotiation": "Auto negotiate" }   Cheers, Ben ... View more

Hi, No not one from Meraki. Barracuda has a few options. https://www.barracuda.com/products/emailsecuritygateway/models/1   Or you could opt for a cloud anti-spam as @PhilipDAth suggests.    I assume working with cloud e-mail (Gsuite, O365,...) is not an option?   Cheers, Ben ... View more

@AJ   What you could try is install the drivers of the thermal printer on the server the client is connecting on and try to print . Printer redirection is a tricky one. Many things can go wrong because the print queue is created in the remote session for a not so standard printer(thermal one) and there is a chance the server simply does not know the correct driver to assign. You can find a lot of threads regarding barcode printers online. Issues should be fairly similar to what you are experiencing.    This could result in a redirected printer not showing up in the session or print jobs not beeing correctly forwarded in the queue   Cheers, Ben ... View more

@AJ,   What app server setup do you have? (Citrix, RDWEB, ..) Because depending on the technology you're using client printing devices can be mapped on startup of the remote app.   If it's a remote desktop connection than the option needs to be set that local resources can be used in remote connections.    Regards, Ben     ... View more

Hi Richard,   The MX is not a spam filter for email. If you need advanced spam filtering you would need a seperate device. Or set your spam rules in your e-mail server if a seperate device is too expensive.   Regards, Ben ... View more

Philip,     How about a loyalty badge?  https://secure.thetrackr.com/products   Customers can hang this to their keychains and perhaps you can have it branded with the logo on it you want?    There are a few kickstarter projects on BLE card with the size of a VISA but haven't read much good about it.   Regards, Ben   ... View more