If you are creating a guest network, and by that you mean a network that does not allow access to the local network isolates guest users from each other then it does not have to extend across all sites. If fact that just adds extra complications. The guest network at each site/location can require the same user credentials across all the sites.   Isolated guest network creation -  Go to Wireless > SSIDs  If the SSID you wish to use for guests does not exist, set it up, or edit the settings for that SSID. Then on the Access Control page set up the environment Under the section headed - Addressing and traffic you will see  Client IP assignment  - this gives you the option to select   - NAT mode: Use Meraki DHCP Clients receive IP addresses in an isolated 10.0.0.0/8 network. Clients cannot communicate with each other, but they may communicate with devices on the wired LAN if the SSID firewall settings permit.   Then ensure that guest users never access the local network. Usually I apply a group policy that stops guests running peer-to-peer applications (file sharing) and adjust the minimum network speed so that 802.11b is not supported as that severely restricts throughput. ... View more

    Most of the time I program it using Node Red, which some Meraki and Cisco techies also like using. my present project uses one of these to autonomously control the height at which a racing sail boat "flies" above the water when on hydrofoils. I use ultrasonics to measure the height above the water and adjust trim tabs on control surfaces using linear activators along with "some other stuff".   It is absolutely brilliant, and it scales as I can just add additional 2040s if I need more processing power. Node Red is based on Node.js so it is asynchronous . . .   I intend using the same software to automate Meraki API functionality. ... View more

explanations ... View more

@FCB wrote: Again me 🙂 Is anyone use Face Detection with MV cameras? The most recent MV product launch emphasised the fact that they did not do facial recognition but did identify bodies. I don't know what happens to chimpanzees, shop mannequins or dogs.   ... View more

Hi   Not sure what you have on your LAN by way of access control at present.   However, 802.1x authentication may be set on a per SSID basis. There is a pretty clear explanation here.   For small installations I tend to use WPA2 with pre-shared keys.  ... View more

@BlakeRichardson wrote: Hmm, ok just some more information switch IP's are all statically assigned and even if they weren't the gateway isn't running a DHCP server. Switches are on firmware 9.32 On my test network IP addresses of network devices are statically assigned, by the DHCP set up on the MX (fixed IP assignments for the VLAN concerned). Could this cause a problem? Would it be better to hard code a static IP on the device, rather than assign it? ... View more

@BlakeRichardson   Can you send wireless users a deauthentication packet? I do not know if it will work in your situation. I have some issues with smart devices but the Android based devices seem to do as they are told. So, hopefully, change policy, send deauthentication packet, user blocked on attempt to login again?   Some Cisco info here - https://mrncciew.com/2014/10/11/802-11-mgmt-deauth-disassociation-frames/ ... View more

@Asif-Mansoor   I suggest you look for webinars that explain how the Meraki system functions and sign up for them. Some of them give licensed equipment to those who enrol and attend the webinars. This should give you sufficient knowledge to successfully complete the CMNO program (I day on-line examination). Becoming CMNO qualified makes it possible for you to be sent the device(s) required to make up a complete Meraki "stack".   ... View more

@nikiwaibel wrote: @Uberseehandel: you may want to use the new "Layer 2 LAN isolation" feature under Wireless / "Firewall & traffic shaping". i use that successfully from through a segregated VLAN. https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/Wireless_Client_Isolation   it is available since firmware 25.8. 25.9 (current) fixed the issue with the splash pages. Yes, I've been using that, but one had to work at it. It involved several different pages to set it up. This should all be set up on the same page. That is the logical approach. It should be something along the lines of: Define SSID as "Guest network" Assign VLAN     ... View more

I find this the most handy API documentation -  Meraki Dashboard Prov API along with - https://github.com/meraki/provisioning-lib  like you I can't see anything about MX ports but Iwonder if a cloning based approach might achieve the same effect . . . ... View more

@wirednot wrote: Beyond roaming- I have no concerns with any of the limitations. Bonjour is $hit, shouldn't be used on business networks to begin with, Fastlane is a gimmick, we generally avoid multicast on the WLAN. Still curious about the "high load" thought- given that CPU/memory can't be really seen. "Bonjour is $hit" I hear it is being renamed Liberty_Hi (it worked for French Fries) Ban it and the screams of fanbois will be heard around the world . . . In professional office suites and home offices, Bonjour and Chromecast are becoming common. When somebody is working late, a little music in the background often helps.  The problem I have found is that it does not appear to feasible to put, say, ChromeCast players, on their own VLAN, even explicitly allowing the trusted devices on the secure VLAN access to the player VLAN, using the ports and protocols supplied by Google. I think the issue in this case is multicast. ... View more

@Meraki-Fan wrote: Our office space is approximately 4000 Sq..  It's an open space with conference rooms made of glass walls and doors.  We recently had a vendor do a RF test to determine how many AP's and location for installation.  They are recommending 8 total AP's.  He is recommending 3 AP's within 15 feet from each other.  It was my understanding that having too many AP's too close from each other was actually a bad thing.  Any assistance with this is greatly appreciated.  Thank you. There are a great many variables that come into play when designing a Wi-Fi system. Don't Guess - Measure Use a site survey tool such as one of those provided by Ekahau. They have a range of products, even a free version - HeatMapper.  Guestimates off the plans are just that, and walk rounds without measuring are little better. Recently built or refurbished spaces can provide interesting problems, such as foil backed plaster board. This sort of issue usually doesn't make itself known until installation and set up, without a site survey. Construction and refurb jobs rarely end up being exactly as specified. Walls that look similar but originally divided different tenants can turn out to have quite different characteristics as far as RF transmission is concerned, because of fire regulations. Don't Chase Range From a practical usability, flexibility and management point of view, it is preferable to have more smaller, cheaper APs operating at the lowest RX volumes commensurate with adequate signal coverage, than to have fewer larger units operating at high RX volumes. As a general rule of thumb, I plan on providing at least one AP for each space that needs WiFi access. Put APs in rooms, not in corridors. The 5 GHz signal has half the propensity to leak into adjoining spaces as the 2.4 GHz signal. But it is twice as reflective. In some urban areas the interference from Wi-Fi users in nearby spaces, cordless door bells, microwave ovens, bluetooth devices, and faulty electrical equipment can make it best to avoid the 2.4 GHz band. This band, in practice only has 3 non-overlapping 20 Mhz channels, so there is usually a great deal of contention for free channel space. At the moment, 5 G Hz has certain advantages, including more non-overlapping channels, higher potential throughput, and, in the case of 802.11ac, more secure encryption, than alternatives available on the 2.4 GHz band.   Hard Wire All Immobile Devices Wi-Fi is not a boundless resource. It is scarce. Do not exacerbate this issue by using wireless to connect devices that logically should be wired.   I look forward to hearing how the site survey goes. (And I haven't even mentioned DFS, TPC and CAC, yet). ... View more

Life would be much simpler if we could set up a VLAN as an Isolated VLAN (remember PVLAN options?).   The isolated port on a switch is not very helpful in real world SME/SOHO installations.   So by default the Guest Network is on an isolated VLAN. So no access to the local network, other VLANs or other users on the same VLAN. If guests need to print documents, then set up a printer that prints what is emailed to it, and put the printer in a secure location so that users have to ask for their print outs. At present moving the default Guest SSID to a VLAN seems to break the isolated attribute of the VLAN . . . and the documentation appears to be out of step with the software. ... View more

@JoshVanDeraa wrote: Anyone aware of what type of authentication method that the MX line (MX65) uses for PPoE authentication? We have sites that use PAP for auth, and one site has CHAP. We are replacing ASAs that have the two options mentioned and MS-CHAP as an option as well.   Thanks in advance. When configuring the MX64/65 one just selects authentication, it doesn't ask about PAP or CHAP.  I use a modem that configures itself for the appropriate ISP network, and it set itself up just fine. So, although I know the ISP uses a VLAN, the modem takes care of that, and the MX seems to handle Baby Jumbo packets. ... View more

@kredmore wrote: Where do you see that?   This spec sheet says only the MX250 and MX450.   https://meraki.cisco.com/lib/pdf/meraki_datasheet_mx.pdf   I may have mislead you - when I googled the spec sheet, what came back as a brief "summary", listed the MX as being amongst those having a fan . . . If so, I'm sorry. . . ... View more

Bruno   According to the spec sheet, the range of MX devices that includes the 84 has fans.   ... View more

At first sight there are several obvious steps you can take-   ensure you have the correct regulatory domain set put these devices on their own wireless LAN, and ask support to turn off the 5GHz channel on the APs servicing these devices set the minimum bit rate as low as it will go turn the radios down to medium use a tool such as Ekahau HeatMapper to check that you have adequate coverage without interference     ... View more

@PhilipDAth wrote: I've never used AzureAD for this ... but it is completely cloud based and looks like it is a bit easier to me, especially since they provide a direct LDAP interface.   If you use Office 365 for email and documents then this would bind everything together for you. The last time I tried to implement this, I needed a local AD. Which is redundant for organisations which have bought into Cloud-based services and infrastructure. However, it is entirely feasible to run RADIUS on the gateway device (MX). I remain confident that AzureAD will handle remote authorisation in a useful manner. ... View more

@PhilipDAth wrote:   . . .   Alas I see he is now a pre-sales engineer for the MC product line. Which coincidentally is the other topic on the immediate beef-list. However, that is the topic upon which I am expecting, imminently, an announcement. I suspect that the biggest stumbling block is that how the fixed/mobile world functions outside North America remains a mystery to Californians. Lets see - there is  a pre-sales engineer in Europe where the MC line is not available, and last month it was announced that MC now supports German, French, Italian and Spanish.    Thanks for the suggestion of "trying" LinkedIn Professional. ... View more

@PhilipDAth   Thanks for that comprehensive reply.   Supermarkets (this chain certainly) have got very good at making sure one uses a phone whilst in store. I've noticed that being in big stores (whilst not using the phone) drains my phone battery, even the equivalent of Caughey's.   Having used mobile cells (with "extra" timing info) to accurately locate handsets, I can see how BLE could be used to guide customers to shelf locations. I was surprised to see a recently arrived app on my phone that is very good at accurately tracking my path as I walk around, it would work in the supermarket too.   It is all a bit big brother, but I suspect we will have to get used to that. OBNW . . .    ... View more

https://documentation.meraki.com/MS/Other_Topics/QoS_(Quality_of_Service) ... View more

@FCB wrote: Thanks.Is there any PDF for learning things about security cameras? First of all look for one of the Webinars on youtube. For example - Introduction to MV Security Cameras   Then you will find plenty more information in the documentation for the MV series HTH ... View more