Yes. If you want to use the native switch port vlan (1).  ... View more

Thanks very much for the support ... View more

MS switches can dynamically assign a VLAN to a client device by configuring the switch port to use the VLAN ID received via the RADIUS attribute Tunnel-Pvt-Group-ID   https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/cc772124(v=ws.10)?redirectedfrom=MSDN   https://documentation.meraki.com/MS/Access_Control/MS_Switch_Access_Policies_(802.1X)#Dynamic_VLAN_Assignment ... View more

I'm using GLC-TE SFP. PPPoE is already set on the local status page. Link Negotiation is already set to Auto (1/10Gbps). When I changed the connection method from ① to ②, the link was up and I was able to communicate with the outside world. ①MX450 --- ONU ②MX450 --- MS350 --- ONU I don't know why, but is it really not possible to configure the MX to directly accommodate the ONU? I think it's a pretty common configuration to accommodate the ONU in a router... ... View more

Received this feedback from support:  Thank you for your response. I believe you are running into another issue which engineering is investigating for false traffic spikes to appear on the graph. This does not truly represent actual client data seen on the network. Our engineering team is tracking this and they are working on a fix. I'll make sure to update you accordingly as I get updates from engineering. Thank you, Meraki Technical Support  ... View more

How to fix it please? ... View more

Hi thanks for your reply.   The problem is that when the meraki 9300 is configured as trunk with the other switch i mentioned i lose connectivity to the cloud.   What i mean is the following:   Meraki switch <---> Third party switch <---> Backbone Switch <---> Internet Router   When the meraki port is configured as access port in a client vlan , it can get to the DHCP server and get a public IP address and get to the internet and register to meraki cloud.   But when the meraki switch in configured as trunk it loses connectivity , so i suppose that i have to program the Meraki switch to be able to get a public (or private if NATed) in order to get to the cloud.   That last config i am missing.   Thanks,   Ditter ... View more

Yeah, understanding your routing config and VLAN setup will help troubleshoot this. Running a packet capture on the LAN side MX could also provide some clues. ... View more

Gracias por tu comentario y como lo mencionas mi SSID era el décimo, cambie mi configuración al siguiente SSID y funciona correctamente mencionado que deje deshabilitado el décimo SSID. ... View more

Does anyone know if this is fixed in a newer version? Or is it safe so "disable" those packets with a firewall rule? Or is there another option to disable it? ... View more

That's exactly it. MX100 has been end of sales for 3+ years and the recommended replacement is the MX95.   If this was a replacement as part of a support case and the MX100 was in a HA pair they should send you two MX95s (and convert the license key in your dashboard).  ... View more

Hi @ETi , as previously mentioned you can’t mix both license types.  You’ll have to RMA the Adv license and purchase the Enterprise lic. ... View more

The MX uses AS prepending for branch routes that have that Hub MX as secondary. ... View more

Did you save the settings after changing the Subnet configurations? To WW point above, given that the subnetting from parent subnet is automatically done, you might have to change address on the inside.   "The child subnet is automatically calculated from the parent subnet. This simplifies the need to manually calculate the size of each child subnet. Each MG will automatically assigned the first usable IP of that child subnet. This behavior is intended to not be configurable in order to make the MG assignments predictable."   As an aside, if you are tying to open a port for inbound traffic, you would need a public static IP on the SIM, if you don't have that, CGNAT won't know what to do with inbound traffic since flowstate is only created outbound from the UE.  ... View more

Thank Raphaell, much appreciated. I feel a little more certain now. ... View more

From the SD-WAN & traffic shaping appliance configuration page you can send specific traffic to a particular WAN, see below where CNN and Playstation traffic from 192.168.20.0/24 go to WAN 2 whereas everything else is set to go to WAN 1     ... View more

Thanks mate! It works! These users were using 3rd party VPN to bypass the guest wireless authentication are now blocked. ... View more

I've solved the  radius issue adding /24 .   ///////////////////////////////////////////////////////// The next step is moving this DHCP on one FW to other FW  For testing i moved one AP but i got this resoult As wll i cant see in the box the radius ok .             like this           ... View more

Makes perfect sense  ... View more

Hi WW,   Switch2 of stack B reports Switch1 as Root via the port connected to Switch2 ... View more

There are mGig transceivers. I use this one in my devices and it's works great. I've used in MX 2.5 Gbps WAN ports and MS 10 Gbps ports.   The issue would be how to power the AP though. You'd either need a mGig injector or AC power supply.   All that said I doubt you're pushing your AP to a level in which you actually need mGig speed. ... View more

Once the device is past end of support then you will likely not get a replacement if it fails. ... View more

Also note that if you are talking about the local status page password, as soon as the MR has been factory reset it will download its configuration and restore the password.   The username will either be the serial number in captials, and no password, or whatever you have configured under Network-Wide/General.   ... View more