Meraki

ww

Looks like its keeping the previous multi vlan settings in the dashboard/backend. Could you try enable multiple vlan and remove those vlans/static routes first.

ww

Works fine here.(in a stack of 2) Check if the ports have the same config before aggregating

ww

Maybe you could use group policies and attach it to a vlan. Group policy fw rules are stateless like acl's.

ww

It is for phones with integrated switch. You could connect a client behind the phone. https://documentation.meraki.com/MS/Port_and_VLAN_Configuration/Configuring_the_MS_Access_Switch_for_Standard_VoIP_Deployments

ww

Did not test it. But at organization alerts you can configure a alert to send a mail or webhook for this alert "Port not forwarding traffic due to access policy" https://community.meraki.com/t5/Switching/Port-not-forwarding-traffic-due-to-access-policy/m-p/250292

ww

So vlan 1 client can ping to vlan 3 client. But at the same time vlan2 client cant ping vlan 3 client? Check if something is blocked if you filter on the vlan 3 client. And ping from vlan2 to vlan 3 https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Firewall_Logging

ww

Does the destination client allow ping. For example:By default a windows pc cant be pinged. Can they ping eachother when you put them both in the same vlan?

ww

Did you try using the fw log tool. Filter on the client and start the update or whatever you are testing. It could indicate what rules are blocking what traffic. https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Firewall_Logging

ww

https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/Throughput_test_to_the_Cisco_Meraki_Dashboard " It is not meant to accurately test the speed an Internet/WAN link is capable of. " "In order to leverage the full performance of a device, multiple sessions must be leveraged. This is best done by an endpoint or client, as the dashboard throughput tool creates a single session."

ww

Hello Is the ssid enabled status:enabled? Does the ap report config up to date? On the radio settings what bands are assigned? Is it the ssid using local lan/breakout?

ww

Not what you asking for. But, You could send guest traffic to a concentrator and break out there. Or send just vendor specific traffic to a one armed concentrator and break out there

ww

Also check the " show details" on the client page. It should give you info on what rules are currently used

ww

I do see the same behavior. its somewhat confusing, because for example a mx does report its actual running firmware

ww

Should be possible. But not from https websites without using ssl decryption.

ww

In addition to above. In 19.x it should be possible when you are able to run bgp. https://documentation.meraki.com/MX/Site-to-site_VPN/BGP_routing_over_IPsec_VPN

ww

https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-site_VPN_Firewall_Rule_Behavior#:~:text=to%20start%20training.-,Creating%20Firewall%20Rules,settings%20section%20of%20the%20page.&text=Select%20Save%20changes. You would need rules like: Allow A-B (you could combine two rules AB-BA) Allow B-A Allow C-D Allow D-C Deny any Or Deny AB -CD Deny CD - AB Allow any

ww

This route can only be used by branche/spokes that have the vlan/subnet enabled for vpn. Also note that when you enable this for.more branches all those subnets van communicate with eachother. You could use the vpn firewall to retrict this traffic if needed

ww

You want to route it between vlans? For mdns: https://documentation.meraki.com/MX/Other_Topics/Configuring_Bonjour_forwarding_for_the_MX_Security_Appliance For igmp you could try ask support if they have any option

ww · ‎Sep 23 2025

Maybe you can clone the wan2 mac address of the mx to a computer, and test on the wan2 ont connection. Dont forget to remove the mac clone after testing

ww · ‎Sep 23 2025

Do you have any global or client shaping limit on the SD-WAN & traffic shaping page? You could try with unlimited and 1Gb up/down there Did you also try another speed test website? Ping time in speedtest is also pretty high, maybe you can manually select a nearby server

ww · ‎Sep 18 2025

In dont know if and when meraki is inplementing bgp prefix filtering. Can't azure only advertise more spesific routes?

ww · ‎Sep 18 2025

On the branch mx where you select the hub. Make sure to not enable the default route checkbox https://documentation.meraki.com/MX/Site-to-site_VPN/Configuring_Hub-and-spoke_VPN_Connections_on_the_MX_Security_Appliance#Hub_and_Spoke_VPN_Setup_and_Configuration

ww · ‎Sep 11 2025

It depends on reg.domain, spatial streams and type of antenna. You should be able to calculate it using this: EIRP = transmit strength (dBm) + antenna gain (dBi) + 10log10 (number of spatial streams) (dBi) - cable loss (dB)

ww · ‎Sep 11 2025

Afaik L2tp doesnt advertise subnets to client vpn users. The client should use full tunnel to meraki. Or In case of split vpn, You should config the client vpn with (static) routes. @PhilipDAth had made a script i believe https://www.ifm.net.nz/cookbooks/meraki-client-vpn.html

ww · ‎Sep 9 2025

Active & Unassociated (Unused Active) - A license has not been associated to a device, but has started to burn. This typically happens when the grace period is over, but the license has yet to be associated to a device. In this state, the license can only be applied to a device that does not have an active license (e.g. a new device). https://documentation.meraki.com/General_Administration/Licensing/Meraki_Per-Device_Licensing_Overview/Meraki_Per-Device_Licensing_-_Configuration#License_States This could also just be the 5 free MT licenses.

About ww

ww

Community Record

Badges