@trunolimit   You could use a DDNS to achieve what you require. However, my own best practice is to put anything that others need access to in a rack in a data centre with a public address. In fact, anything that looks remotely like a server(real or virtual) lives in a data centre somewhere else. My currently preferred location has its own solar array, and co-incidentally, over a decade ago I arranged for it to become the first certified carbon-neutral hosting business in the UK.     ... View more

You are aware that Wi-Fi is half duplex . . . so, in the real world, the AP should work fine on dual 1000Mb Duplex links in most deployments.   "Turns out we have 100% MGig & /MGig/10Gbase-T switches in our network"   and how many devices that attach to the network can make use of those connections? Not the Wi-Fi ones, that's for sure. We are all going to need 1000Mb access at the network edge, for some time to come.       ... View more

@ArpTableCorruptwrote:   However I have not gone through and tested each network that all the remote mesh participants are in. 50 nodes - n*(n-1)/2 connections is 1225, at one minute per connection, that is three days work, a 100 connections is over two weeks . . .  ... View more

Think how congested it would be if every mobile phone was its own exchange (it has been done) and negotiated with each other phone independently. There are times when hubs make sense.   What you describe sounds like a candidate for an exchange, or hub. ... View more

@benny   I'm very interested in what you are doing. I have had 15.4 installed and am waiting to check I can get something else to function before testing the NO-NAT option.   In the course of doing the research for getting the the other requirement configured on another gateway device, it has become apparent that I can selectively enable/disable NAT on a LAN port basis.   So, which is preferred   Scenario 1 -     Let the MX do all its own NATting, and have the uplink to the BrandX device passed through to the internet Scenario 2 -   Activate NO-NAT on the MX and let the BrandX device do all the NATting The network attached to the brand X device will be used to handle all the doubtful devices (IoT), Chromecast, smart monitors, Bonjour and the isolated guest WiFi.   The MX will handle the secure wired and wireless workstations and devices along with the VoIP system, when available. All servers are Cloud located.    BrandX has its limitations but it does have an approach to handling this stuff and knows that multicast reflectors (Chromecast/Bonjour) do not play well with Multicast proxies. I've got most of it working with the only connections between the secure network and the insecure network being by HDMI.   Any thoughts on which will be the best approach? ... View more

@PhilipDAthwrote: This condition is a real bummer: "Participants must be (i) legal residents in the United States" You will probably get away with it. A recent survey discovered that most American believe that NZ is somewhere in Europe. You can put your hand on your heart and swear that isn't true.  ... View more

@PhilipDAth   They shouldn't complain if they get described as limp wristed.     ... View more

@DexterLaBora   I think what you are doing is terrific, a big thumbs up from me.     ... View more

@ITzhak   Funny you should mention that. The support person said words to the effect that telephone calls get dealt with . . .   well I've noted that for next time. ... View more

Just so everybody knows, the responses here are more helpful than the those of support, even when the issue is classified as high priority. I received a response at 22:30 my time, to which I responded, along with stating that I was available to work on the problem for a further 90 minutes (that would be 00:30 local time) and I have still received zilch - nothing.   An RMA should have been issued last night and a replacement device dispatched before COB. It doesn't matter whether it was shipped from CA or UK, it would be here by now.   And how much of a snowflake is the MX64, that it fails, permanently when uplinking to a different device?   What am I supposed to think?     ... View more

Have you been able to notice a difference between those users who don't get an address and those that never have the problem? Are all the WiFi users on the same VLAN? Has anything changed as far as the DHCP options are concerned on the VLAN(s), or firewall permissions? Anything changed with respect to 802.11w or r - that might explain why some users are OK?       ... View more

Well, APIPA addresses (169.254.0.0/16) get handed out when clients cannot find a DHCP server. So something in the configuration of the APs has changed so that they no longer give clients access to the 3rd party DHCPs. That is the "logical" reason. The real reason may turn out to be more prosaic.   ... View more

Support seems to take a somewhat lugubrious approach to solving this issue. It occurs to me that we should be able to download an image onto a USB stick and reload a default config from the stick which then grabs the last good version from the Meraki Cloud. Saves a lot of faffing around, and down time.   Officially branded Meraki USB sticks would make great swag. Especially if they are small enough to fit inside one's wallet.(hint @CarolineS) ... View more

@3ffdotwrote: @jdsilva I have ASA---MX---Layer 3 switch.  The MX doesn't seem to truly be a layer 3 device.  How exactly did you set yours up as a layer 3 device? Good question.   At the moment I have removed all the MX and MS power cords. So it is set up as a desk ornament.   The reality is that I am stuck trying to get it to connect to a LAN port on a different device named Kharon . I tried with the MX Internet port configured to use DHCP, plug in anything else and that works, but not the MX. Then I tried with a static address, that also failed, as did forcing an address from Kharon, which can "see" the MX and IP address, but the MX does not connect to the Cloud and does not become operational. The IP being used for the connection does not exist in the MX's network, I tried using a VLAN initially but have given up on that.   The situation now is that I cannot connect to the MX to reconfigure the uplink to use DHCP as all of the LAN ports hand out invalid addresses/gateways. Out of desperation I even resorted to paperclip engineering, but that didn't help.   At the moment it is just another brick in the wall.    All suggestions welcome. ... View more

@Krewalwrote: We decided to downgrade firmware to version >25. All the problems are gone. @meraki_ please let us know how we can figure where is the heart of the issue. The worst that might happen is "surprising" security update which is going to force us where we do not want to be. Real men don't test, strictly for the punters.   Whilst this comment is sardonic, not (properly)testing is inevitable in a marketplace that embraces rolling upgrades. Most (all?) of the big guys are at it. It is the world we live in. ... View more

@PabloVGranadoswrote: + some official blog-post on this https://meraki.cisco.com/blog/2018/03/wi-fi-standards-on-the-move-again/  Anybody who has been through the proceedings of the last World Radiocommunication Conference 2015 (WRC-15), Geneva, Switzerland, 2-27 November 2015, will be aware of the competition for space in the 5 GHz portion of the spectrum. Too much contention, and huge amounts of growth from new use cases that have only recently been developed. 802.11ad is more likely to be the alternative for land-based networks, despite its range limitations, lots of small cheap APs, lots of meshing, high speed and no pushy alternative spectrum users right now. Probably in the 5 - 8 year range, there is a handful of devices, but testing is proceeding apace. ... View more

Somebody received this notification -    Dear partners, Please note that we have migrated the latest IP pools of WhatsApp to Facebook Mobile Partner Portal. Feel free to browse to the Settings page of the portal and download the latest WhatsApp IP pool: https://fb.me/mpp_support Further IP pool updates are also done through the portal and are no longer distributed via email or through WhatsApp web site. If you have not yet registered on the Mobile Partner Portal or have difficulties accessing it - please request access through the following form and we'll be happy to assist: https://fb.me/mpp_access For any technical requests please contact us through the Support section of the portal: https://fb.me/mpp_support WhatsApp team You could get creative with QOS.   Or have you tried using "bundle IDs" - e.g. - net.whatsapp.WhatsApp ... View more

Have a look at the Sizing Guide Whitepaper. Sorry, ignore this!   Just noticed that the sizing guide, despite being recently updated, does not have the full current MX range, and omits the 250 and 450   @MerakiDave does a product/documentation manager need prodding?   ... View more

Update - for anybody contemplating IOT / Chromecast / Sonos / Multicast IP TV   The multicast reflector that Sonos-style deployments require does not play well with the IGMP-proxy that the TV streaming needs. I don't believe we can ignore this stuff.   I bought a light bulb the other day, without really looking, but when I checked my receipt I did a double-take . . . it is "smart" and intended to be controlled in conjunction with lighting devices by some IOT hub. This sort of use is bound to become normal all over the place, homes, offices, warehouses, factories, you name it . . So I hope Meraki is not going to put it on the back-burner; we need to be able to isolate this sort of kit, but still be able to control it from devices with access to the secure VLANs.   I have't begun to test NO-NAT yet, as there are some unresolved issues with respect to how it will operate, and what will do what and to what. to paraphrase. ... View more

I've spent most of the weekend stuffing around with the new kit, and upgrading the firmware, SSH'ing in to the devices.    I have roughed out a VLAN scheme that effectively is common across the Brand X and the Meraki networks. My uninformed intention is to move anything "dodgy" to the front end system, so all the AV kit and the playout stuff go up to the front end and is only linked by HDMI to the secure network devices fronted by the MX. All the Chromecast stuff is moving up there as well. Brand X has specifically built into their gateway the ability to allow appropriate access between secure and insecure zones so that Chromecast may function seamlessly when invoked from a secure mobile device. On Friday morning I inadvertently bought a light bulb that is network aware. That is also destined for purdah. But it does very clearly illustrate that Meraki has to release a strategy to deal with the impact of IoT/Smart Home/Office devices. ... View more

Claudio   In some countries O2 offers a fixed line service such as - https://www.o2.co.uk/business/products/broadband/high-speed-internet  also there is the mobile LTE service - https://www.o2.co.uk/shop/inspire/mobile-broadband-explained#section4  The maximum speeds available depend upon country and location within that country.  ... View more

Is that O2 land line ISP or LTE ISP service? It makes a difference. ... View more

I am using Node-Red to do an autonomous flight control project, it is asynchronous, and is used by Meraki & Cisco devs for demo purposes. You may be able to use it to run multiple threads, and not have to sweat Python. It might sound over-kill, but it is a joy and a revelation to use. You just plug stuff in, it is built on node.js ... View more