@Ceden I am using Advanced Security with AMP & IPS enabled (along with Insight, which adds a good bit of RAM overhead).  ... View more

There is some info about operating in China. https://documentation.meraki.com/zGeneral_Administration/Support/Information_for_Users_in_China   On the whole, AutoVPN in and out of China is not guaranteed to work - and it may not continue to work beyond the end of this year.  Any new MX being deployed is now connected to the Chinese hosted version of Meraki, which does not have connectivity to the version used in the rest of the world.  You are expected to get a private WAN circuit between the rest of the world and China.   Also note that if you are operating an MX in China using AutoVPN to a location outside of China you should seek legal advise inside of China to determine if you are now breaking the law.  Otherwise you may be exposing the people working in China for you to considerable risk.   I also know that this year, 2018, was a transitional year.  You may find by the end of the year you have be forced to migrate to the Chinese version of Meraki.  I don't know.  Perhaps open a case with support to ask them what will happen to your Chinese devices. ... View more

We have adopted a SAAS based philosophy. It is way more cost effective than I expected. Visio just gets added to the subscription. I use it all the time, so I have an annual sub, intermittent users (not really a good idea, it requires familiarity) can subscribe on a month by month basis, which is fine as it gets built into the charging. Project is another matter and is hugely over priced when used on an annual subscription basis. Unfortunately, being used to Project and Primavera, the alternatives lack allure. ... View more

Makes sense ... View more

Are you sure there has been no change in the way the layer 3 routing is being done?   Has their been any change in the client tracking option (such as to track by IP address)? https://documentation.meraki.com/MX-Z/Monitoring_and_Reporting/Client_Tracking_Options   Otherwise has their been a change in firmware version? ... View more

@PhilipDAth wrote: Maybe Caroline would make it like the "Make a Wish" feature on the new Meraki Insight product (that is satire).   ps. Here is a screenshot in case you have not seen this.  Perhaps Meraki should run a competition.  If a customer actually figures out how to make a wish for Meraki Insight they get a free pair of glasses. Go on, look really hard, and you'll eventually figure out how to make a wish.   @PhilipDAth wrote: Maybe Caroline would make it like the "Make a Wish" feature on the new Meraki Insight product (that is satire).   ps. Here is a screenshot in case you have not seen this.  Perhaps Meraki should run a competition.  If a customer actually figures out how to make a wish for Meraki Insight they get a free pair of glasses. Go on, look really hard, and you'll eventually figure out how to make a wish.   Just beneath Report a map error - (43" monitor). I need a new prescription ... View more

You are a font of fascinating knowledge, @Uberseehandel! After reading your comment, I'm tempted to replace our arrow kudos symbol with a rocket ship icon  — but I imagine that would be even less intuitive than an arrow 😛🚀 ... View more

I am curious as well.  This may be way out of line if so i apologize in advance.   Apparently you can run openwrt on the Meraki AP's such as the MR18. Now i am wondering after looking at the Meraki Support Site why the following is posted https://meraki.cisco.com/support/#policies:gpl Then if you click on the Meraki Linux Files http://dl.meraki.net/linux/index.html towards the bottom you do see the Meraki-operwrt. also there are meraki-firmware-sources as well.  does this mean you could spin up a VM ? or run it in GNS 3? or potentially run the firmware on a switch that you have let lapse for maintenance? .   ... View more

Thanks for all the help it is working as advertised. ... View more

Congrats to all our new members.  Keep participating, it's a great community.  ... View more

@PhilipDAth - I have a suspicion that it's just that - edits to posts inadvertently generating new emails, even though they shouldn't. There's a known issue with the community platform around that, but it sounds like it can be resolved with some workarounds. So let me know when you get a dupe! I know.... I'll edit this post a couple of times and maybe it will generate a dupe for you.   ... View more

I've used 13.33 on a bunch of devices without issue. ... View more

Nice I will look into that.. we are setting Pingdom up now to monitor WAN 2 until Meraki can add it as a feature. ... View more

Thanks for the replies.   Issue now solved.   Turned out to be routing on the other side, due to reasons of how the customer does this we basically were not getting responses from the target machine. But they have checked/amended the routing and now we get replies.   Turns out the Meraki VPN setup was fine all along 😉 ... View more

@PhilipDAth wrote: I moved mine to my Wife's side of the bed, so it is quieter now.     I hope you aren't expecting much for breakfast . . .  ... View more

sounds good - you too! ... View more

I'm not completely clear on your situation.   Do you realise that non-Domain computers can log in using RADIUS credentials still?   If you use Systems Manager, then it can automatically deploy certificates onto computers (and mobile devices) and you can do certificate based authentication.  And you don't need any servers ... ... View more

i have only one network i.e. wireless. ... View more

Hi Adam,   There's a list at https://documentation.meraki.com/zGeneral_Administration/Other_Topics/Product_End-of-Life_(EOL)_Policies ... View more

Changed the core switches over to the MS250 Meraki Stack last night. Connected them to 8 HP Edge switches without problem. I dint realise the HP switches were such a mess with their trunks, native vlan mismatches unused vlans and some even in unused LACP groups, with all that mess the trunks still all worked. I had read that if your trunks were not configured identical each side you were in for trouble, but not this time. Cleaned up the trunks on the HP side anyway, next will be to implement LACP between Core and each HP Edge. Layer 3 setup is easy as pie, and yes yes yes I love the monitoring! ... View more

Your best solution is as stated above by @PhilipDAth. You will build static routes on the MX firewall and point them to your core switch IP address since it is the gateway for the VLAN networks. With routing you only have the ability to point a route to another IP on the same subnet on your interfaces or out through the zero cloud route.  ... View more

@BrandonS I've actually experienced the same thing with DNS when changing IP config on internet 1 and moved the physical cable from internet 2 to internet 1.   The ISP DNS just wouldn't work, but google DNS solved it. This is a while ago on a MX60. The no link light would have bothered me for an L1 issue as well. But in this case i did the move after business hours, so the appliance was connected overnight for about 8-9 hours before someone that could assist came to work.  ... View more

Hi i just tried if my MR18 would detect my Wifi Pineapple Nano while it was spoofing. I assume the other AP´s should also detect it.   https://prnt.sc/j49y8q ... View more

I have deployed a lot of Meraki networks.   I have never used an Enterprise licence with an MX.   Probably easier to not buy Enterprise licences.  You give up far too much security when doing so. ... View more