I'll see what I can do, can't promise anything though! 🙂 ... View more

That's an awesome tool! One I've now bookmarked - thanks for sharing! ... View more

Also from the same doc: "Cisco Meraki Client VPN only establishes full-tunnel connections, which will direct all client traffic through the VPN to the configured MX. As such, any content filtering, firewall or traffic shaping rules will apply to the VPN client's outbound traffic. " ... View more

Tl;dr, Sonos is meant for a home environment, so they don't like working interVLAN. Keep your network simple, i.e bridge mode and allow Wireless> LAN traffic (Wireless > Firewall and Traffic Shaping) and you should be good to go 🙂 ... View more

Firstly (from many hours of setting mine up), the Sonos system needs to be on the same subnet as the controller, i.e. if you're using your iPhone to connect, make sure the SSID is on the same VLAN as your Sonos system also (just use the same SSID).   I've found the best solution (and I know it's not ideal for every scenario) is just wired one of the Sonos' to the MX (or MS), and if you've got other Sonos devices, they'll form their own SonosNet mesh. This means you don't need to faff around with settings on the MR if there are incompatibilities.   If you've got a pretty simple network, I really wouldn't recommend using L3 roaming for any reason. The only reason to use L3 roaming I find is if you've got a campus-style network and need to use different VLANs in different 'buildings' that broadcast the same SSID. Bridge mode is usually fine if it's a simple network.   My current set up has a Sonos Beam wired to my MX, and all other Sonos speakers (mostly Play:1 and One's) are dotted around the house without a hard wire.    Fun fact if you're using SonosNet, you can browse to sonosipaddr:1400/support/review (replace with the actual IP address of one of your Sonos speakers, you can find this in Network-Wide > Clients) and view the STP and network matrix info, this helps pinpoint issues with STP and meshing issues for example.     As you can see in this diagram, all speakers mesh to the Living Room Beam, you can see the relative signal strength and STP states here too. Make sure you don't wire more than one Sonos if possible, else you'll likely get an loop, so long as your core switch has the highest STP priority you should be okay - you really don't want user traffic being sent over your SonosNet mesh.   ---------   As much as I wanted to have Sonos and other IoT/Media devices (like Chromecast) on their own VLAN, it just doesn't work most of the time and is more work than it's worth. Keep the end-client and Sonos on the same VLAN and you'll be fine   Kind regards, -- Connor Loughlin Network Support Engineer .:|:.:|:. Cisco Meraki EMEAR 🇬🇧 For reference, many questions can be easily answered by searching our online documentation: http://documentation.meraki.com ... View more

My home guest network is in bridge mode too, just on its own VLAN. This means guests that roam between APs keep the same IP address, unlike NAT mode. Was causing issues for iPhone VoWiFi for example ... View more

Make sure your upstream modem/router isn't NAT'ing either, else you'll need to configure the port forward on that device also. ... View more

Plus, the first SSID on any network by default will block L3 Wireless > LAN traffic, create a new network and you'll see it 🙂 ... View more

Greetings!   Only one uplink can be used for Client VPN, the MX will only respond on the Primary uplink you've configured under Security & SD-WAN > SD-WAN & Traffic Shaping.   Kind regards, -- Connor Loughlin Network Support Engineer .:|:.:|:. Cisco Meraki EMEAR 🇬🇧 For reference, many questions can be easily answered by searching our online documentation: http://documentation.meraki.com ... View more

Hey Peter & those following this thread!   Hope you all had a great bank holiday weekend and are staying safe.   Quick update, I picked up an MG from the office for some further testing. Initially my EE SIM was experiencing the same behaviours as you, using general.t-mobile.co.uk as the APN and not coming online, however, the following config got it online:   The actual thing that got it working was changing "Cellular IP Type" to "Any" and it instantly came up, I mean... ta-da!     Let me know how you get on!   Kind regards, -- Connor Loughlin Network Support Engineer .:|:.:|:. Cisco Meraki EMEAR 🇬🇧 For reference, many questions can be easily answered by searching our online documentation: http://documentation.meraki.com     ... View more

Hey Peter, I'll continue comms over the ticket, when we've found the issue I'll pop the answer in here too so everyone can see it 🙂 Kind regards, -- Connor Loughlin Network Support Engineer .:|:.:|:. Cisco Meraki EMEAR 🇬🇧 For reference, many questions can be easily answered by searching our online documentation: http://documentation.meraki.com ... View more

Hey Peter, Completely depends on the SIM card to be honest. Mine's a standard contract SIM from EE, other packages or older SIMs may still require the T-Mobile APN for example. But that's best for EE to answer. Would you be able to describe the SIM package you're using, e.g. is it a PAYG EE sim, phone contract SIM, mobile broadband SIM etc. I only ask as some carriers don't like putting a phone SIM into a Dongle, Three was investigated by Ofcom for such practises (https://www.ofcom.org.uk/about-ofcom/latest/bulletins/competition-bulletins/all-closed-cases/cw_01218) I see the MG is currently offline, can you bring it up with a WAN connection just so I can have a quick look? Kind regards, -- Connor Loughlin Network Support Engineer .:|:.:|:. Cisco Meraki EMEAR 🇬🇧 For reference, many questions can be easily answered by searching our online documentation: http://documentation.meraki.com ... View more

Hey Tom,   You'll just need to tick the Auto Join box. None of the fields are 'pre-ticked'.                 This is pushed to my iPhone for example, and whenever I am at home (not that we've been allowed to leave with the current lockdown!), it will automatically authenticate with the network.   Kind regards,   -- Connor Loughlin Network Support Engineer .:|:.:|:. Cisco Meraki EMEAR 🇬🇧 For reference, many questions can be easily answered by searching our online documentation: http://documentation.meraki.com ... View more

Hey German, I can only speak for iOS for now, but we rely on the MDM commands that Apple publishes to actually interact with the device. Until Apple publishes an endpoint for us to remotely interact (like remote desktop) with a device, it will never be a feature. If you're interested, here's the Apple MDM Protocol reference guide we use when interacting with an iOS device: https://developer.apple.com/business/documentation/MDM-Protocol-Reference.pdf Considering one of iOS' main selling points is privacy and with the OS being a mobile-first, I doubt this will ever be a feature. Out of interest however, what advantages would having RDP-like access to an iPhone for example have?   Kind regards, -- Connor Loughlin Network Support Engineer .:|:.:|:. Cisco Meraki EMEAR 🇬🇧 For reference, many questions can be easily answered by searching our online documentation: http://documentation.meraki.com ... View more

Hey Peter, I didn't use any APN to get the device to come online with EE. Just tried this again with an MG at home and my iPhone's EE SIM, came online pretty quickly without any configuration. The MG will use the APN configured on the SIM by default. As @ Uberseehandel mentioned, I'd give EE a call if it's failing to get an IP address, you can open a support ticket with Meraki if you'd like us to take a direct look also, let me know the case number and I'll take a look. ... View more

Might be barking up the wrong tree but I've seen times before where Windows will try and mount the drive using the Client VPN credentials which causes issues. Try giving this a go:   Go to C:\Users\*username*\AppData\Roaming\Microsoft\Network\Connections\Pbk Right click rasphone and Open With > Notepad Edit the line "UseRasCredentials=1" and change this to 0 Save the file and reboot (just to be on the safe side) Try and connect to VPN again and it shouldn't now try and use the VPN credentials for that network drive This was mentioned a little while back on our forums also (link) but I found this out a while ago in my previous job.   Let me know how you get on, and stay safe out there!   Kind regards, -- Connor Loughlin Network Support Engineer .:|:.:|:. Cisco Meraki EMEAR 🇬🇧 For reference, many questions can be easily answered by searching our online documentation: http://documentation.meraki.com ... View more

Hey there, Connor here from Meraki Support. I've always found this guide works when resolving DNS over Client VPN: https://www.petenetlive.com/KB/Article/0001402 *Note* it's not a Meraki or Cisco link, so your results may vary and we're not responsible for the content hosted here. Kind regards, -- Connor Loughlin Network Support Engineer .:|:.:|:. Cisco Meraki EMEAR 🇬🇧 For reference, many questions can be easily answered by searching our online documentation: http://documentation.meraki.com ... View more

Hey Robin, I ended up running down to Waitrose and picked up an O2 SIM, came up fine as expected 🙂 Central London can be pretty poor for LTE speeds but I got a solid ~10Mbps. ... View more

You'll need a Meraki Dashboard account and a camera in order to utilise any API calls meant for MV. I'd reach out to the competition organisers to either obtain more information and/or a trial camera. It's likely they'll need to give you access to a pre-configured Dashboard account. But this is separate from Meraki so you'll need to contact Cisco Devnet. ... View more

The profile isn't under System Manager > Settings, rather System Manager > DEP (if you've used DEP), or it'll have been set in Apple Configurator. You can't change this setting without factory resetting the device. Your best bet is to use AirDrop (if you've got a Mac) or use Google Photos to backup the iPad's camera roll. I use AirDrop when sending myself screenshots for those lovely SM support cases, it's so much quicker than using a cable and syncing 🙂 ... View more

Anytime mate 🙂 Whilst complaining, I'd ask them to update the Android build too - Marshmallow came out in 2015! Yikes... ... View more

With BYOD, the storage is still broken into 2 different partitions. Google requires all devices to be encrypted so unfortunately this will not work either. "Google requires that Android 5.0+ devices be encrypted when using Android Enterprise. This is important for both general device security as well as application specific data security. More about it can be read here: https://support.google.com/a/answer/6178111?hl=en" See: https://documentation.meraki.com/SM/Deployment_Guides/Android_Enterprise_Deployment_Guide#BYOD_Enrollment ... View more