Thanks. I guess they sent the notice to select people. ... View more

Is there another Meraki party at CLUS like last year? ... View more

Yea, it would be nice if Meraki could chime in. If the AutoVPN/headend/org tracks and dictates which subnets are free this could be some good information for us all. Right now I have my templates with their own summary, but if a single summary could be shared across multiple templates.... ... View more

Just figured out the issue with my Z3 on AT&T, you need to specify"BROADBAND" as the APN. ... View more

If both MXs are connected to the same switch for internet, I presume your ISP/uplink is handing out two IPs? ... View more

Simple answer, make the SSID itself a EULA (all be it a short one) 😉 A more interesting point is you can track a users device without them joining your network and without their consent. Does GDPR apply if a user does not join your network, yet you can track their fairly precise location (Bluetooth logging)? ... View more

Ok, so single arm is really meant not to fully connected like a dual arm scenario then. Thx for the feedback 🙂 ... View more

I saw that statement, but they don't have a drawing for it. All the drawings are for dual-arm. Internet port to upstream uplinks, then a LAN port to west switch and a LAN port to east switch on each MX. If west switch fails, west MX is still primary but via link(s) to east switch.   Now, applying same logic to single arm. Meraki is using single arm for both LAN and WAN, so west Meraki to west switch and east Meraki to east switch. What about Internet 2, can you not do typical fully connected? That means if any one part of the west side fails then east side Meraki is now primary?   This was what I was thinking of for single arm fully connected (proposed in red):   ... View more

That makes a little more sense @PhilipDAth - I have had zero issues with direct connect, but was going to change with some new installs/upgrades since so many people spoke against it. But, I am not trunking multiple vlans across it.   Second question - am I blind or is there no design guide/recommendation for single-arm concentrator, warm spare, without direct connect? ... View more

Now, time to battle out the terms and conditions semantics 😉 ... View more

EGG FOUND! ... View more

I am. Is there another Meraki party? ... View more

14.x is still RC and they are now advertising 15 beta? Give me stable 14.x! ... View more

Wow, I'm a total n00b. My test device on the Meraki network had the DSCP markings defined, but I wasn't seeing anything on the Cisco network side when inspecting. Apparently it helps if you select the "enabled" option located right above the markings.   Literally every other of my 140+ video units have it enabled, but some how my personal test device got flipped to disabled...lol   So I have confirmed that the MX will trust DSCP and pass it over the tunnel problem free with all other traffic shaping rules/features disabled.   Thanks everyone...LOL. I'm going to go hide in my corner now..... ... View more

Next question......how? LOL   I can't seem to find any documentation on trusting DSCP on the ports. ... View more

Hey guys, thanks for the responses, but I'm not sure that answer the core question. I'm not looking for the MX to do QoS necessarily, but for it to trust and pass DSCP markings.   I know the MX can remark and preserve markings, I have seen this in the pcap on the receiving end of the tunnel. The problem is this is something being written on the MX based on protocols/signatures, destinations, subnets, etc.   What I would really like to know is, can the MX maintain markings it receives on the LAN and preserve them through the tunnel?   My Cisco video endpoints apply DSCP 24 and 34 markings, and Cisco phones apply EF (DSCP 46), but I'm not seeing this on the far end of the tunnel. If I create the rule for SIP traffic to receive DSCP 34 this is received on the far end of the tunnel, but thats a signature/protocol based rule, and its applying DSCP 34 rather than preserving the existing markings the devices apply. ... View more

  I'm guessing FB doesn't host work and personal on different domains, do they?   The two options I see are:   1) Block FB and use a real collab tool 2) Realize blocking FB does nothing for productivity (people have phones) and allow it.   The real win is to get people to stop using FB period. ... View more

What version of code is the MX67 running? I had found a major VPN bug in 14.37 and older for the MX67/68. My MX65 would do 120/12 all day long for tunnel traffic, swap for the MX68 and it barfed.   Any easy test is to enable split tunnel so internet speed tests are local, not over the tunnel. If you see improvements you know you are hitting the same bug, as the issue exists only the tunnel.   ... View more

If Insight is suppose to be top-left corner above org, no I don't see it. Nothing under my licensing section either.   The one article on how to enable it is vague. Where do I find the SKUs for ordering, I must be blind....   Is it really a big mystery? LOL ... View more

Well that's confusing @MacuserJim because in the dashboard it says "Switch to one of your applicable networks to check it out:" and shows me one of my networks.   So what you are saying is Meraki is telling me to check out a feature which my network has which I am not licensed to use? LOL ... View more

I am really confused, where do you find WAN health? When reading about the new feature it said one of my networks supported it, but I could not find the option anywhere. There is little information about this on the Meraki site other than screenshots, which don't tell you where to go on the dashboard. ... View more