Thanks @MerakiDave. I'll reach out to our SE to ask about being apart of the Beta analtics programme.   ... View more

No, not a genuine indicator of AP throughput/performance, and there are many variables and possibly different mechanisms in the background to determine the throughput.  I haven't tried it between 24.x and 25.x (will when time permits) but I'd like to check out a pcap of the test and compare the 2 versions.  Open a Support ticket to have them assist with this and ask them to research additional details on the throughput test mechanisms.  Your 24.12 is the latest GA firmware and your 25.8 is the latest beta. ... View more

Make a wish for that and I'll do the same, for example on the Network Wide > Clients page in addition to a download option have an email option and a schedule option like you would have on the Summary Reports page.  The monthly export you're asking for is not built into Dashboard by default but you could leverage the API and have a script run monthly to pull both client data and location analytics.  Maybe check here for more info on pulling client data via the Dashboard API https://n190.meraki.com/Daves-Meraki-Net/n/mwgsJb4b/manage/support/api_docs#list-the-clients-of-a-device-up-to-a-maximum-of-a-month-ago and more info on location analytics via the Scanning API http://developers.meraki.com/tagged/Scanning   ... View more

Hi @PierreS unfortunately those pages do not currently give you the custom time/date ranges and not beyond 30 days.  Some of that data gets aggregated anyway beyond 31 days otherwise I imagine the storage requirements would become massive, as there are now well over 1.2M Meraki networks and growing rapidly.  As you mentioned, the location analytics page can provide custom ranges, so you can do month over month comparisons or see seasonal trends.  The other place you can do this is on your Summary Reports under the Organization menu.  Please do use the Make a Wish tool in Dashboard to put your use case in the suggestion box.  For the Network Wide > Clients page for example, for now, you would have to run a monthly report and export it as an XML or CSV and store them locally.   ... View more

  Here is an example of one of our testing rigs for multi monitor video streaming. What is cool about having different video walls per browser tab per monitor is you can mix type. What this means is some of the streams can be local, some cloud proxy, some live, some historical. In the picture below the single camera stream is actually a zoomed in video wall, just moving your mouse to the screen and clicking will zoom it back out to the tiled view.       ... View more

Thanks! ... View more

Have not seen that in my SM network, I have a handful of phones (and on different providers) all showing the correct phone numbers on the clients page.  The only devices not showing numbers are not actually phones but wifi-only (non-cellular) iPads or tablets.  Perhaps try forcing a mass check-in, select multiple devices from the clients list, drop down the "Command" button and select Request Check-in and after a few minutes refresh device details.  If you still have actual cell phones properly enrolled in the SM network and not showing their phone numbers, I'd open a Support ticket to investigate.   ... View more

Disable 2.4Ghz if you can.  Life will be much better. ... View more

Hi @MerakiTexan Just noticed this unanswered post from a couple weeks ago.  Correct that this setting is not templatized and is not (at least not yet) accessible via the Dashboard API.  Every use case is different but generally speaking most customers choose to NOT auto-contain rogues, but instead send alerts when rogues are detected and investigate if/when needed.  Auto-containment can be problematic and very disruptive depending on the use case.  Rogues can be on the LAN without being related to actual active attacks.  Think of things like wireless printers that are typically on the wired LAN but also broadcast a "hey I'm a printer" SSID by default.  While that can certainly pose a possible risk and attack surface into your infrastructure, it's not an active attacker plugging in a rogue AP to your network, and it may be better to get alerted versus run active containment against those devices.  The rogue SSIDs typically need to be classified manually anyway on the AirMarshal page.  More info here: https://documentation.meraki.com/MR/Monitoring_and_Reporting/Air_Marshal   ... View more

Understood @Mr_IT_Guy and good point.  And I'm going to float the idea for more advanced webinars with that team.  Glad to hear the SD-WAN webinar was a better experience.  Since the MX is such a full-featured product and there's much to talk about, it hard to NOT take 20 minutes to do an MX overview.  But I hear you, the bulk of an SD-WAN preso should be 90% focused on SD-WAN.  And we don't want experienced Meraki customers (and regular webinar attendees) to sit through a 20-minute overview every time.  Instead of squeezing in 20 minutes of "overview" material that takes time away from specific advanced topics and Q&A, perhaps we could offer more regular "Advanced Webinars" that take all the baseline knowledge for granted and dive right in.  Consider this your "Make a wish" and I'll get this in the suggestion box. ... View more

Thanks Dave.  All good workarounds, but... where's the puke bucket?   This type of info should be baseline reporting output for a wireless infrastructure product.   A 24/7 warehouse doesn't like us finding out from previously productive pickers and packers who complain.  😉     Thanks again for your insights.  -Gary ... View more

When you configure the option to deny access to the local lan it blocks access to all RFC1918 address space. ... View more

I wouldn't necessarily deploy an MX as a proxy.  The MX does have HTTP caching available in the Web Cache options, but only supported in models with a physical disk (where the cache lives) and only works on static HTTP content, and is meant more for sites with low Internet bandwidth (like  under 10Mbps) and the need to cache the static content.   The MX is using Squid in the background, looking in the HTTP header to see if the content is cacheable or not, and if not, it won't.  So much more of the common Internet traffic is now dynamic in nature, serves up content from many different URLs, and is all generally marked as non-cacheable.    But do you really need to cache dynamic content (probably complex and expensive) and/or deploy an actual proxy server (becoming antiquated except in certain use cases), or can you deploy the appropriate content filtering, L7 firewalling, IDS/IPS and traffic shaping rules (all simple and included with any MX Adv Sec license) to address the requirements? ... View more

Dave,      That makes perfect sense - thanks for the help. I have all the S/Ns in a spreadsheet so I should be able to make a .csv for a bulk import easily. Thanks again - ... View more

Thanks for your helpful reply. For home offices/professional office suites, silent (fanless) network devices are a godsend. Very often, this kind of installation involves putting switches into the (roof) space above a corner room (think boss's office and bedrooms). It would be really handy to have the option to power these using PoE, and (even) passing through to one or two RJ45s. ... View more

I am guessing that if you do not have an Organization > License Info option, as you have shown in your screenshot, that this may be a "Legacy" Systems Manager license in a Systems Manager only Network with no other Meraki devices/licenses.  But regardless which license type you have, let's consider it "unlicensed", otherwise you should see a License Info page.  Call into the Meraki Support team to confirm.  Even if you are unable to technically receive Support (on an unsupported version) they'll be able to confirm for you.  Do you have any other piece of Meraki hardware?  I'm guessing you have no physical devices in your inventory if you look under Organization > Inventory.  If you do have even a single piece of equipment (even a free AP you got from attending a webinar) that you can add to your organization inventory, you'll get that License Info page to show up.  And at that point you should also be eligible for email support.     It is correct that with the latest licensing, Meraki offers a customer-initiated Free Trial, fully featured for as many devices as you need (even over 100) for 30 days with full support, and it's very simple to convert that to paid licensing model if purchased.  I'd agree with other posts (here and on other forums) that Meraki has understandably evolved the licensing model (to the only two options today, temporary free trial or paid version) as Systems Manager popularity grew along with the development and support teams.  If this is going to be for home/personal use for just a few devices, unfortunately there's really no SOHO (free) license option at this time.  Keep in mind while the only version is ultimately a paid one, it it one of the most full featured enterprise EMM products available, is 100% software so requires no on-site appliances, works with any vendor’s network infrastructure, there's no training required, and the licenses you do pay for are device agnostic, one license per any type of device with options for 1/3/5/7/10 year terms, and provides full email and phone support 24x7x365.     ... View more

Hi Dave,   Thank you so much for such a detailed explanation and advice. Regarding your question about working with the Meraki sales team or Partner sales team - Well, we are (Verso d.o.o.) a Cisco Gold Partner and working closely with local Cisco office (Sarajevo). I did not contact the Meraki sales team, but will ask our sales manager to get in touch with them. Also, thank you for sharing this link where I have found a lot of useful information.   BR, Adis Cato ... View more

Don't forget to think about coverage density too - i.e. how many clients are you trying to serve concurrently and with what required level of data consumption?   With greater usage the need for higher connection rates increases, so that you serve the transmitting client quicker and release airtime for other nearby clients. ... View more

9.32 is now released as new "stable" firmware (no longer in beta).   I have only had one one bug with 9.32.  When using the policy of blocking DHCP servers by default (so that you have to white list allowed DHCP servers), and you have a VLAN that the Meraki switches have no layer 3 interface in, and you have another non Meraki device acting as a DHCP relay for that VLAN into another VLAN that does have a L3 Meraki interface in - you can not whitelist the non-Meraki DHCP relay MAC address (when you click save it fails to save just that one MAC address), and the switches incorrectly block DHCP in that VLAN.   A pretty rare case, so I doubt that others will run into it. ... View more

Thanks for this suggestion, and you'll be pleased to know there is a feature request in the system already for this ability.  It is a good/valid request and you can expect it to come in time, but ETA is unknown.  The best suggestion is to keep making the wishes (best to make the wish while you're actually on the packet capture page in Dashboard so it gets properly categorized) and keep the feedback coming through your Meraki or Meraki Partner sales teams so they can also help prioritize.   ... View more

Generally speaking, the #1 best and common practice is WPA2-Enterprise which leverages 802.1X/EAP with a RADIUS server which in turn queries an external LDAP database (very commonly AD).  This covers everything you need with respect to AAA, mutual tunneled authentication, RBAC, and a variety of EAP types to fit various requirements, and to handle both wired and wireless use cases.  You mentioned DEP and iOS 11 so if you have it, RADIUS can also query Open Directory.  And if you're using Meraki Systems Manager you can also leverage that for things like client certificate distribution to implement EAP-TLS, without the need to stand up your own PKI or do all the cumbersome certificate management.  Anyway, definitely read up on 802.1X/EAP and RADIUS to plan out your AAA services on your network.  ... View more