As long as you're referring to devices that are able to handle cert based authentication. But in each and every network, there's more than that.   Unfortunately, many Windows admins don't see that and that's one of the main reasons NPS sucks bug time... ... View more

As DHCP and RADIUS are used for completey different tasks: what are you trying to achieve?   Do you want to use the AP as DHCP relay? Or are you referring to authentication via RADIUS? ... View more

Welcome Andy!   I've got great news for you: if this is the first time working with networking, there's nothing more fancy than Meraki! 😎 ... View more

In addition, it seems that more Meraki staff also seems to like it in here which is really great imo. ... View more

Congrats, Mr. Rising Start @damienleick and @NolanHerring! Whoa, Mr. @PhilipDAth, you rocked that month (again! ;))! What a great group of people with @Nash, @jdsilva and @BrechSchamp! Thanks so much guys for your honourable mention! ... View more

Welcome and have fun (not only) with your CMNA gear 😎 ... View more

There‘s no better place to ramp up your Meraki knowledge! 👍🏻😎 ... View more

As long as performance features are met, who's interested in how much RAM a box has?   The good thing about Meraki: data sheets are actually quite conservative when it comes to througput or users. ... View more

Welcome here! ... View more

Looking at the API docs (https://dashboard.meraki.com/api_docs) there seems to be no API endpoint for that. Possibly based on the fact that only few MXs support Web caching. ... View more

Simply use VLANs to separate the specific networks, terminate them at your Fortigate and have a firewall ruleset in place. ... View more

The specific Meraki SDK you‘re using will be deprecated, take a look at https://community.meraki.com/t5/Developers-APIs/Python-update-network-device/m-p/76600/highlight/true#M2906 As mentioned, use https://github.com/meraki/dashboard-api-python instead. ... View more

https://www.graylog.org/ is a great example, especially when running their Meraki content packs. ... View more

We did a lot of Proof of Concepts for customers. Customers running Firepower, Check Point, Firewall XYZ: when adding Umbrella to the mix, there was still a lot of things you wouldn't want to see in your environment. Even with strong perimeter security in place. ... View more

Create a new subnet and possibly transfer subnets for the nex MXs then. 😎 ... View more

Just put new MXs into a dedicated network, from there on you're able to do what you're describing. There can only be one MX (including its spare unit) at a time within a given network. ... View more

Super Geschichte. Herzlich Willkommen! 😎   ... View more

The most basic use case for iPSK is having different pre-shared keys for different users. They can be separated by special policies but you don‘t have to do that.   The group policy is assigned by RADIUS attribute „Filter-ID“ by default, but you can choose to have another attribute within the Access Control Cnfiguration for your iPSK-enabled SSID.   As long as your RADIUS server is able to return a specified attribute, it can be used. Even when you‘re using NPS. 😉 ... View more

First and foremost, Umbrella is one of the easiest to us security solutions you‘ll find. No need to operate a separate device, simply point your external DNS to their IP addresses (as you already do).   With Umbrella, you have a very powerful added layer of security in place. You users will be automatically be protected even from things your firewall / IPS etc. will learn about in days to weeks. The best thing is, the protection is happening in the background, there‘s no need for regular configuration, even monitoring can be automated. ... View more

There‘s no API endpoint for an admin password: https://dashboard.meraki.com/api_docs#update-an-administrator ... View more

Weiter so! 👍🏻 ... View more

Your only hope then is making a support call. Possibly they‘re able to deactive 2FA for your account. Woudln‘t count on it though cause this would cause a security issue. ... View more

To be able to help, it'd be good if you'd provide us with more detail. For example: what's the error message? ... View more

You can have   Multi-Domain and have one device placed into Voice domain and one device placed into Data domain or Multi-Auth where more than one host is placed into the Data domain, but the downside with using Multi-Auth is: “After a VLAN is assigned to a host on the port, subsequent hosts must have matching VLAN information or be denied access to the port. Only one client is supported on the voice VLAN. Guest VLANs are not supported in this mode.“ Source: https://documentation.meraki.com/MS/Access_Control/MS_Switch_Access_Policies_(802.1X)   Unfortunately, also using Multi Host won‘t work either: “With multi-host, a single successful authentication will put the port into a forwarding state.  All subsequent authentication attempts are ignored.“   So in a nutshell: guess you‘re out of luck here. ... View more