I hate these cunning stunts . . . ;-[] ... View more

@PhilipDAth wrote: You can't use splash pages if you have Active Directory integration turned on.  Have you by chance got Active Directory integration enabled? https://documentation.meraki.com/MX-Z/Access_Control_and_Splash_Page/Access_Control that is a worthwhile reminder, thank-you. ... View more

Given the amount of "information" Amazon pushes my way, I think I'd try and find an appropriate person at Amazon or Alphabet/Google. Dimly I recall an issue with the Shepherd illustrations. ... View more

Quite possibly, USB does not have what is required to build reliable LTE connections. That is my experience. For what it is worth. ... View more

In extremely critical dynamic (hi G-force) situations, I use Sierra Wireless devices. I avoid USB. Lesson learnt the hard way. They are there when I need them, the way USB so often isn't. For home and professional office use, I am investigating less butch kit but it isn't significantly cheaper.   ... View more

Probably better to use something like x.x.5.5 to disguise real public IP addresses. ... View more

E-Plus used to be a German mobile network operator, they were merged with the Telefonica subsidiary O2 Deutschland. The IP numbers you have indicated are original E-Plus IP addresses 5.1.128.0 - 5.1.255.255 E-Plus Mobilfunk GmbH 5.4.0.0 - 5.7.255.255 E-Plus Mobilfunk GmbH ... View more

I adjust the minimum speed upwards to the point that 802.11b devices no longer connect and wait. Then they get told to upgrade. ... View more

You have some E Plus numbers there? ... View more

With all manufacturers' products, I find everything works better if I turn off 802.11b compatibility. ... View more

Probably we need a new "line" of technically based presentations, even make then CMNO/CMNA exclusive, and provide real people to interact with. ... View more

@khurram wrote: I have to provide internet on same subnet IPs.   If I understand you correctly, no problem   Using supernetting, you could, for example set up 192.168.2.0/24 and 192.168.3.0/24 both of which may be addressed using 192.168.2.0/23.   So 192.168.2.0/24 and 192.168.3.0/24 are part of the same supernet 192.168.2.0/23.       ... View more

10G copper transceiver or Cisco Multimode    If I have understood you correctly.       ... View more

Airlines solved this problem by consolidating on a few hubs to cut down on the number of different flight destinations. When I have a lot of peers, in a dispersed network, I usually build a ring with a handful of cross ring connects, and build in some routing smarts. ... View more

@khurram wrote: Dear Members;   I have define a subnet 172.168.0.0/16 with VLAN 200 and assign this vlan to multiple ports. I want to restrict some users to do not browse internet but to access the corporate servers and data. From a management point of view, the simplest thing to do is split the VLAN into 2 groups, one of which cannot access the internet and the other which can. Otherwise, if there is an identifying attribute you could use to sort the sheep from the goats you could apply a rule. Or give the users with no internet access a DHCP server that only handles the corporate servers. ... View more

This is great information. Thanks for posting it.   For me, noise profiles are important. Noise has to be managed, and all the effective noise reducing cabinets I've found are expensive, to say the least. Its not just decibels. its also pitch.     ... View more

To get more control over what the modem/router ahead of the MX actually does, I have ordered a Draytek 2862-K. It handles IPv4 and IPv6 natively, and has a lot of flexibility with how NAT'ing is handled, a RADIUS server, and, at a price, there is a version with an inbuilt LTE modem. Be aware that Meraki does not fully hanle IPv6 yet; for example, some analytics will be missing. I need this because the MX does not pass Source Specific Multicast correctly, and the Draytek does. But the MS switch in its default configuration does handle it, so I can just bypass the MX from the router to the switch and thence to the Playout device. I have replaced my entire network stack three times this year. All the suppliers are well known Bay Area Corporations. It seems they just don't "get" how important it is to handle the TV feeds from the content providers. So instead of switching yet again, I've looked for ways around problems. ... View more

Thanks for your helpful reply. For home offices/professional office suites, silent (fanless) network devices are a godsend. Very often, this kind of installation involves putting switches into the (roof) space above a corner room (think boss's office and bedrooms). It would be really handy to have the option to power these using PoE, and (even) passing through to one or two RJ45s. ... View more

There is a Draytek router that has an LTE modem built in. It has all sorts of other useful features, and incidentally handles Source Specific Multicast, which the MX does not; so one may route the multicast round the MX direct to the switch. Plus it is full IPv6 ready. ... View more

There is a lengthy section in a Cisco document on the topic of IGMP query-interval.    EG -  The Cisco IOS software uses a default IGMP query interval of 60 seconds, which is different from the RFC standard default of 125 seconds. Using a lower default IGMP query interval of 60 seconds allows routers to stop forwarding traffic faster when a member crashes without sending leaves (in IGMPv2 or IGMPv3 environment), or if using IGMPv1: 3 * 60 seconds versus 3 * 125 seconds. If a lower version IGMP-enabled interface (that is, an interface running IGMPv1 or v2) receives a higher version IGMP query (IGMPv3) with a different query interval, the following events will occur: An error message in the following format will be displayed: %IGMP-3-QUERY_INT_MISMATCH: Received a non-matching query interval <interval in seconds>, from querier address <ip-address>   There is too much to copy everything, but it is illuminating to read up on it.         ... View more

It appears that there are capacity issues with Azure's UK West and UK South regions.     ... View more

I pass Source Specific Multicast (SSM) through a small Meraki switch without issues, so I can stream encrypted 4K videos. To do this, I ensure that IGMPv3 snooping is enabled. But the MX does not handle SSM, and there is no information as to when it might. As a workaround, I have ordered a router that does handle SSM to place ahead of the MX. Ideally, I would have just put another MS switch ahead of the MX64 and used an IPv6 address, but my ISP has not fully rolled out IPv6 , yet and there are limitations as to what Meraki does with IPv6 presently.        ... View more

Apparently MS has been busy - Azure MFA with RADIUS authentication    As a solution to a different problem, I am looking at using a device that has a Radius server that can be synched with Azure AD, in the new year I shall attempt to get it working with AD and see if it can be used for WiFI authentication, without digging into the API.   I also use Univention's UCS which is cost effective         ... View more

The addition of a MS ahead of the MX appears not to be viable in my situation as the ISP hasn't fully implemented IPv6 so the block of IP addresses is not usable. Plus Meraki has NOT fully implemented IPv6. So I shall put a third party router between the modem and the MX. At the moment, the most likely candidate is the Draytek 2862, although there are other (less expensive) devices under consideration. If routers cheap enough to be given away by ISPs can handle SSM multicast, why can't the leading US network equipment manufacturers handle it. I've been through 3 Bay Area manufacturers this year and it has been a complete washout. Being forced to put a third party router ahead of the MX makes a nonsense of the reporting anf give me no insight into what is going on in all parts of the network. It isn't a good solution. Why does nobody want source specific multicast capability? It has been a standard for long enough, RFC4607 has been around since 2006. Cisco allededly handles it, although the Gin Factory also claims to handle SSM but doesn't and has no intention of handling it on SRX devices. This is an industry fail. ... View more