Oh yes! It's more a file size from the last century ... ... View more

Well done! And for all others who are not yet a "King", this is a challenge with a reward! 😀 ... View more

I am using JPEGmini on the Mac to reduce the file size if the images are too large. ... View more

As always, I would not wait for it. At least not if it is not in the newest Beta. ... View more

On Catalyst, it is possible in newer Firmware versions. If Transition mode is configured, it enables WPA3-Transition on 2.4 and 5, but WPA3-only on 6 GHz.   EDIT: I just looked; the same is valid for Mist. This makes me think it could be common outside of the Meraki world.   EDIT2: I still would prefer a separate SSID in most cases as I am not a friend of any transition mode. ... View more

Sadly, with the MR we can't use one SSID with WPA3 on 6GHz and WPA3 Transition on 2.4/5 GHz. You likely need a new WPA3-only SSID and migrate all capable devices into this SSID. ... View more

If it is the precisely same model, then yes. But you likely don't have to buy a new switch. With a limited lifelong warranty, you can open a support case for an exchange. ... View more

If the connection request policies are messed up, it doesn't even get to the point where the certificates are relevant. When looking at the screenshot above, it seems that you assigned the root cert to the NPS. Let's say this is as least "unconventional". ... View more

The certificate shown in NPS must be trusted on the end devices. You really should get a consultant to help you. 802.1X is one of the most complex topics and is especially hard with NPS. ... View more

Likely the "Secure Password". Did you add it? ... View more

WHAT did you remove? You have to make sure to have the right inner method. ... View more

Did you edit the PEAP EAP type to set the inner Authentication method? That is not the MSCHAPv2 that is shown below that box. It has to be configured inside the PEAP config. ... View more

MR Advanced is licensed by AP, The traditional Umbrella is licensed per User. For pricing reach out to the Cisco Partner of your choice. Where are you located? There are a couple of partners here in the community. ... View more

Perhaps I wouldn't call it "Router on a Stick" anymore. But an internal segmentation firewall is also often implemented that way. Just an ether channel to the firewall from the main switch. ... View more

They are for different Models of APs. E6 should be for MR46E, E5 for MR42E if I remember right. ... View more

This is exactly how it can be done (although there are multiple ways). ... View more

Yes, the "normal" Umbrella can be integrated with the MX. I have this running for multiple clients. But if there are VM-Hosts I typically prefer the virtual appliances as the integration. ... View more

You have two options: Migrate to MR Advanced Integrate your Meraki Network with a separate Umbrella "Install" I prefer 2) because it is much more flexible, but 1) is typically easier for the administration. This description is already some years old but will answer most of your questions: https://meraki.cisco.com/lib/pdf/meraki_whitepaper_mr_umbrella.pdf ... View more

With multiple networks, I also would add a new SM network on the dashboard. There you enroll the devices that need to use the new SSID. For this enrollment, you need a connection to the internet, This could be done with the registration SSID, a wired connection, or even mobile data. The registration process is described quite well in the dashboard. You know you need an SM license for every device enrolled? After that you create a new Tag in SM, use this Tag in the Sentry-Config and apply the Tag to the devices (also in the SM config). The enrolment can also be done as a self-service by the users. ... View more

I used both the Copper SFP+ and the DACs from fs.com. ... View more

WPA3 is only needed if you want to use the 6GHz band. If you use your MR57 with Dual 5GH (I use ours that way but that could change with the next iPhone) you can still stay on WPA2 Enterprise.   The Tags are assigned in the Systems manager. When a managed device is assigned the Tag you used in your Sentry config, a WLAN-Profile and Certificate is provisioned to the device. The onboarding SSID is only used to get to the internet. This is the connection on which SM sends the certificate to the client. ... View more

Imagine the combination of cloud magic with Meraki magic … ... View more

It's the cloud; they have the resources ... ... View more

I like this idea, the next step would be a 3D visualization. ... View more

Admin error, putting the wrong port into the wrong VLAN switch crash and forwarding without config applied  config lost due to any other reason As @cmr writes, it is not worth it to save a couple of bucks. Although I prefer managed switches on the WAN side like Catalyst 1000 or CBS 350. ... View more