@Kieshan I was researching this same topic and came across this thread.  I know its older now, but I thought of an idea.  If sites are connected back to a DC Concentrator hub, then that can serve as a way to show the WAN traffic.  If you look at VPN status, all the spoke sites have a status, plus the usage.  Click on any one and it will show the daily usage.  Granted this isn't data that can be exported, but it does answer one my questions; How much is each site using.  I would like to see the spoke side show its data too.   -Andrew ... View more

CONGRATS! ... View more

You can use a dedicated SSID for your SONOS devices that is set to Bridge Mode ... View more

The last part of the doc is actually incorrect. You don't need to unbind anything to add a MG into a bound network. Steps to get it done are this. I also created a video walking through it.   1. Ensure your template supports the MG device type which is outlined in this section of the doc. More recently created combined templates should already have MG, MV, MT device groups in them. 2. Create new MG network 3. Bind that MG network to your template (requires step 1 to be completed) 4. Optional, combine the previous MX, MS, MR network with the new MG network into one bound combined network ... View more

Sorry to have to put new life in this thread but I do have the same problem and 1:Many NAT is not the solution.   My scenario is that I have on the Sophos firewall certain internal vlans masquerading out as specific external IPs e.g. internal vlan 1.2.3.x looks like 300.100.100.1 and vlan 1.2.4.x looks like 300.100.100.2 where 300.100.100.1 and 2 are additional public IPs ... this is just a representation, 300.x is just a # 🙂    Then in our cloud systems we use these IPs to help with traffic filtering without having to do VPNs.   Is there another way besides the two external interfaces to have masquerading of these Public IPs?   thx MP ... View more

Would love to see more traction on this. Linksys even has 'firewall' models with link aggregation capabilities. ... View more

@DACITServices have you tried forcing the speed as per @SoCalRacer's suggestion above.  I know it isn't clean, but it often works... 😈 ... View more

Hi Meraki Dave,   Any updates on this? It's ridiculous that we still don't have access to these metrics. We need this information to be able to scale properly. Does Cisco not want us to spend more money? Seems counter-productive.   Jim ... View more

For your information.   I contacted Meraki Technical Support because I could not see the documentation. The HTTPS Inspection document has been intentionally de-published.   There are the following reasons.   HTTPS Inspection is BETA version and the specifications are subject to change at any time. HTTP Inspection could lead to a significant impact on existing functionality and network stability.   In addition, the public release of the document was cancelled due to the high risk involved in operating the system for general users.   I contacted support in Japanese, so the nuances may be slightly different when translated into English.   In my opinion, I don't consider it a serious matter because there are ways to offload to Cisco Umbrella. ... View more

Ok, aquí vamos de nuevo!!!, Here we go Again!!! ... View more

So, for example, I have 3 VLANS called VLAN 100, 140 & 150, with IP addresses of 172.28.100.x, 172.28.140.x & 172.28.150.x.  My DHCP server is in VLAN 51 at 172.28.51.x, and the switch is on mgmt VLAN 31 or 172.28.31.x.  For the Routing and DHCP, do I create in interface in each of the vlans, so like 172.28.100.5, 172.28.140.5 & 172.28.150.5 for example pointing to my DHCP server, or would I just use 1 IP for all interfaces in the switch's VLAN 31, forwarding DHCP requests tagged with the VLAN ID to the DHCP server? ... View more

Hi @Matt-Ignite  thanks for that - apologies for the delay responding... yes I agree 5 minutes is very much a long time - particularly if you are using VoIP. Approaching the problem from a different angle (probably needs a different post) we have a new housing estate very near us, like less than 50m, with FTTP - is there a way to get FTTP when you are just on the edge of a deployment? I mean does ordering a new landline force the issue? Anyway just thinking aloud. D ... View more

What does config using DNAS provide that cannot be done inside Meraki dashboard using following doc: https://documentation.meraki.com/MR/Other_Topics/Hotspot_2.0_Configuration_Example ... View more

I just had this same issue plaguing me for a few weeks. Had multiple Cisco and AWS support engineers troubleshoot with me and we could not figure it out until this morning. I wanted to post a more specific solution in case others like me find this and start tearing their hair out: If you want your EC2 instance to be able to SSH to an on-prem device through Meraki, you need to add an inbound rule to your vMX's security group that allows SSH traffic from the VPC CIDR (or from whatever subnet/individual IP from that block).   There are autogenerated rules from creating a vMX in AWS and SSH is not one of the protocols included because Meraki does not allow SSH into itself (so there would be no need for it in general). ... View more

Thanks ... View more

Keep in mind that MX250 with MA-SFP-1GB-TX supports ONLY 1000Mbs. Sub-speed (10 or 100) is not supported...! ... View more

That explains it, thank you! (I spent hours trying to finf the hidden button that I had to press..) ... View more

@Gleep52 it cannot work as you only have one port number for the QSFP+ ports.  On other switches that support breakout cables the QSFP+ ports are numbered like 37 and 41 so that when you use a breakout cable, 38, 39 and 40 appear. ... View more

I am also facing same problem but only when i am trying to get all data (from all pages). But when i try it for single (current) page only by omitting out total_pages='all' then it works fine.   requests.exceptions.SSLError: HTTPSConnectionPool(host='n370.meraki.com', port=443): Max retries exceeded with url: /api/v1/organizations/<ORG-ID>/devices/statuses?perPage=1000&startingAfter=R2MN-1QLA-HNVB (Caused by SSLError(SSLCertVerificationError(1, '[SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate (_ssl.c:1129)'))) ... View more

Older wireless adapter drivers, particularly Intel ones don't properly see WiFi6 APs.  Anything newer than 2017 is usually okay.  What adapter is in the laptop and what date is the driver from? ... View more

16 dBi is not omni directional but highly directional so you better make sure that antenna is aligned properly. With these kinds of gains you probably have less than 30 degrees before you lose half of your signal. ... View more

just saw this discussion, sadly I had no luck with my MX68 and also not with the Z3 ... 😞 ... View more

Great video but I must have missed something. My Site-B is configured as 'Spoke' selecting Site-A as hub. Site-A needed to be set to 'Hub'. VPN status is green. Both IP ranges are different, one 10.10.... and the other 192.168.... When I map from computer/Site-B to share on computer/Site-A it will not connect as simply in your video. Using Windows 10. What am I missing? ... View more