Gratz all! ... View more

Found some info here: https://discussions.apple.com/thread/3963202   Blocking TCP 5223 and the following IP ranges: 17.173.0.0/16 17.178.0.0/16 17.133.0.0/16   Again with the caveat that this will likely take down multiple Apple services as the port is used for the Apple Push Notification Service and the ranges are big.   Also found a blog of someone who studied the Facetime protocol in detail in 2010: http://www.packetstan.com/search?q=facetime   Might have changed since then...   I also found some info on the Aruba website that they at least can identify the conversations to optimise QoS (not with the intention to block anything).     ... View more

@jdsilva wrote:   What is that value? What do you need it for?   Maybe for this: https://create.meraki.io/build/wayfinding-mapwize/   It's mentioned there. ... View more

So I assume you blocked youtube with the L7 firewall rule in the MX firewall? Something like this: L7 Firewall Block   And then in the new group policy you created you selected custom firewall rules:  Allow Youtube Group Policy   And then you applied the policy to the clients like this:   Apply group policy to client Correct?   I tested it and it works for me. It only blocks the actual video stream though, the website itself loads fine. During testing I gave it some time to sync the MX configuration and restarted my browser. Sometimes it took a little while to actually start doing what I configured it to do. ... View more

It arrived last Friday! Very nice  Thanks @CarolineS   ... View more

I'd try to stear clear from using the device type for policies as they are known to be inaccurate at times: https://community.meraki.com/t5/Network-Wide/In-accurate-Device-type-reported-by-Meraki/td-p/380   You can't hide SSIDs for specific users/devices it's all or nothing.   You'll be better of using other access control methods like 802.1X (WPA2-Enterprise), authentication through a captive portal, manual via the client details page, Cisco ISE, ... Which one is the best choice depends on your use case.     ... View more

@PhilipDAth wrote: If you mean two MX's, rather then two networks, and you mean warm spare mode - then the two MXs share the same IP address. https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair And you only need one MX license, saves you some money. ... View more

Is it possible you have a problem with step 6 or 7:   Logic Flow Client connects to AP AP redirects client to splash server Splash page displays content and includes additional parameters in the URL Client interacts with the site (form, oAuth, SMS, etc.) Form submission sends user name and password to Meraki in post body Meraki sends the user credentials to the configured RADIUS or Meraki Authentication server in post body Meraki grants the login and redirects the client to the success_url The success_url is a route on the splash server that will store the logout_url paramater The client is logged in and will see a final splash page which optionally present a logout button using the supplied logout_url parameter The user can optionally press a logout button using the logout_url to end their session. If a continue_url is provided in the query, it will send the client to this page. Are you using Meraki or RADIUS auth? Do you have any logs in either? ... View more

Same question here for Cisco: https://community.cisco.com/t5/network-management/fqdn-hostname-for-syslog/td-p/3345599   There it's actually worse imo, you can enter a FQDN but it gets saved as IP.   You only have to configure it once per network, not per device. So from that point of view I guess if it changes it's less of a problem than for traditional network equipment. If you have lot's of networks you can script it: https://dashboard.meraki.com/api_docs#update-the-syslog-servers-for-a-network   Like @PhilipDAth said, I'm not sure that I'd want the "complex things" that DNS can do increase the risk of losing all my logs due to an issue with them. But you should indeed be given a choice. ... View more

It's working!   If I may add a little remark though. I was wondering if there is a way to open images in a separate tab (without going through the source code with Chrome).   In this post for example there's a really big picture: https://community.meraki.com/t5/Wireless-LAN/Meraki-and-Purple/td-p/34603/jump-to/first-unread-message   To be able to read everything, even with the lightbox working, you're have to download the image. If you were able to open the image in a new tab, the browser would allow to easily scroll around on the picture. Maybe that's what the maximize button is supposed to do, but then it doesn't work for me. ... View more

You should be able to use it to mount to the ceiling too. ... View more

The included mount will be similar to the MV12 one.   See this video for an idea: https://www.youtube.com/watch?v=AM7PFeTyNuM   Not sure if you can buy a spare. ... View more

Might want to provide a link to the guide you followed.   From the Meraki point of view, this is the guide to look at to configure EXCAP (External Captive Portal): https://documentation.meraki.com/MX/Access_Control_and_Splash_Page/Configuring_a_Custom-Hosted_Splash_Page_to_work_with_the_Meraki_Cloud   From your screenshot I'm wondering whether you performed this step: Enabling a Custom-Hosted Splash page on the Meraki Cloud Navigate to Configure > Splash page Select the SSID you want to configure from the SSID drop-down. Under Custom splash URL select the radio button Or provide a URL where users will be redirected: Type the URL of your custom splash page: Click Save Changes.   Purple will need to be compatible for this to work properly!   Rakesh, here's the OP's screenshot more readable: Link ... View more

Nice and clean!   Wild guess: 4 x MS120-48LP and an MX84?   Are you using Meraki APs too? ... View more

  I found the following: Note: If a device is whitelisted in a network that is bound to a template, that client will be whitelisted on all other networks bound to that template. Conversely, if the client is removed from the whitelist on one bound network, it will also be removed from the whitelist on all others.   Source: https://documentation.meraki.com/MR/Group_Policies_and_Blacklisting/Blocking_and_Whitelisting_Clients   Based on that it should be standard behavior if all your networks are making use of the same template. ... View more

10.128.128.128 is the IP address of the AP. The AP can handle DNS resolving for the guests. Previous posts should help troubleshooting if you're experiencing issues with that if it's not working.   However, if you want you can still configure a custom DNS server too: https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/Configuring_Custom_DNS_for_an_SSID_in_NAT_Mode   Edit: My reply was meant for your previous post. ... View more

I think you'll need to use create your own portal leveraging the Captive Portal for that. There's a parameter called continue_url. That's what you need.   More info here: https://create.meraki.io/guides/captive-portal-api/ ... View more

You'll have to configure it in Twilio. It's a general setting for all SMS's sent by your account. It's not supported on the free trial though.   More info here: https://support.twilio.com/hc/en-us/articles/223181348-Getting-Started-with-Alphanumeric-Sender-ID-for-Twilio-Programmable-SMS ... View more

Meraki.io is the source for all API stuff.   Adding to the info given by @jdsilva and @NolanHerring this is probably a good start too: https://create.meraki.io/build/meraki-postman-collection-getting-started/ ... View more

Also, a quick ipconfig /all on a windows client can show you the DNS settings it's using. ... View more

Gratz all! ... View more

Have you tried a different SIM card/provider as a test? Judging by the state "Connecting" and by the fact that the provider is at least detected I suspect the modem is working fine but the provider is not letting you on their network for some reason. So I would try to rule out that there's an issue with the modem/MX by confirming with another providers SIM card first.   See more info about the states here: https://documentation.meraki.com/MX/Cellular/3G_-_4G_Cellular_Failover ... View more

MX has netflow support but I'm not sure it does what you need. More info: https://documentation.meraki.com/MX/Monitoring_and_Reporting/NetFlow_Overview   Have you checked the supported SNMP OID's to see if they do what you need? https://documentation.meraki.com/zGeneral_Administration/Monitoring_and_Reporting/SNMP_Overview_and_Configuration   I know that the IF-MIB supported by the MX (when polling it on the device itsself, not the dashboard) can report on metrics of interfaces: http://www.net-snmp.org/docs/mibs/interfaces.html#ifInErrors ... View more