The most likely threat.....?  What do you have on your network that needs protecting?  Sensitive data, financial data etc etc?   I would ensure that these IoT devices are segmented away so should the worst happen any lateral network movement can’t happen. ... View more

Because you used a VM I think. That was my experience. ... View more

Excellent advice, thank you. The 52, if I’m hearing you correctly, could work better in a situation where it’s between two areas and both of them are somewhat difficult to reach and so you’ve got to spatial streams available for each one basically. Like if the access point has to go in different directions to connect to clients the more potential streams the better. ... View more

Its just wood. I will keep an eye on it. Thanks for all your help as always.  ... View more

@KarstenI  @Bruce  Haha thank you both. This is great. My bandwidth is rarely saturated (250x250 fiber) so Im going to not worry about it. Sounds like thats the suggested path at least for now.  ... View more

@RumorConsumer, just had a look at that switch’s data sheet and it states that it supports 802.1p CoS and DSCP. Since it’s unmanaged all I can guess is that it has some sort of preprogrammed QoS policies, and/or it just passes through the 802.1p CoS header.   The interesting part here is that the 802.1p CoS bits are part of the 802.1Q header that also carries the VLAN information. So my guess at what you’re seeing is that the 802.1Q header is being copied across the switch. Essentially this means that every port on the switch behaves as a pseudo trunk port. If traffic enters the switch untagged it will also leave the switch untagged, if it enters with a tag, it will leave with the same tag. ... View more

@PhilipDAth sorry for screwing up the nomenclature. I appreciate your time always. And @Inderdeep and @Bruce    So then we are agreed managed switches whenever possible as opposed to unmanaged.   Imagine, if you would, my same question, but instead instead of L3 and L2, I meant an "L2+" managed v standard unmanaged gigabit switch.  ... View more

You could need to configure the new VLAN to have that access. ... View more

Well I’m not sure what happened but the group policy seems to be working now for my primary user vlan. Pretty neat. Thank you for the replies. @PhilipDAth It seems like the MX takes a few seconds to realize that it should turn the speed down on like a Speedtest. There’s no speed boost option with the group policy the way there is in the firewall and traffic shaping preferences for the SDWAN. What’s with those few seconds of crazy high speeds that then get turned down? Does it just take it a moment?    I just uploaded a file and watched my Mac's activity monitor bop up and down from 15megabytes per second to 35 then back to 20 etc. 150000kbit/sec should be about 18MB/sec. Why doesnt it just hard cut it off there?  ... View more

No DFS events in the logs.   I was able to catch it in the act. The speakers went dead and looking at the log, the channel changed to get better reception less than 30 seconds before. The log shows the speakers dissociate while every other device doesnt even bat an eye. Some report dissociation and then less than 2 seconds later reassociate. I bought this: https://www.tp-link.com/us/home-networking/wifi-router/tl-wr902ac/ And set it up in client mode as a simple wireless bridge. The speakers have an RJ45 on them for hardwired connections. I factory reset the speakers and told them not to connect to my wireless network. They connected via this TP Link device smooth as butter and have been happily listening to music for days with not a single drop out with a few channel changes. To me, this pretty conclusively points the finger at the speaker's wireless implementation. That they hit an unrecoverable crashed state (they must be power cycled to come back online) is an indicator that the driver or whatever governs their operation is not familiar with the circumstance where a channel changes. Computers need to know what to expect or they dont work right. That all sound about right to you guys?  ... View more

It’s this one    https://www.automationdirect.com/adc/shopping/catalog/wiring_solutions/cable_glands_-_plastic/metric_thread/bm-enx-13-w ... View more

@RumorConsumer it might say CCA on the jacket like this:   ... View more

@cmr    Ok here is what we figured out.   The switch can configure VLANs on each of its ports. The modem and the WAN1 uplink on the MX both seem to expect and appreciate VLAN 1.   The WAN port on the MX will acquire a IP address from the first device it can locate. So basically you just tell the port with the satellite on it that its on VLAN1, and you tell the other ports with the non-active satellites to be on different other random VLANs. When you want to use a new satellite, you first move that port over to VLAN1, then you remove the current satellite thats providing the IP to the WAN on the MX. The WAN on the MX says oh I need a new IP, and what do you know there is a new DHCP server there ready to lease. It works. We've switched them around a bunch of times and its about 50% faster than the approach of enabling and disabling ports which we also tried. Yay! ... View more

It seems to have been accurate before. I dont get why its not anymore. They literally include version numbers down to point releases. If they don't have a way to pinpoint the version why do that?  ... View more

ok thanks! ... View more

thanks! ... View more

Ok good to know. I think i will be in range ... View more

I tried but the few I called didnt seem too great. Dead websites, dead phone numbers. I got a reply on a DM so I feel gratified.  ... View more

Thank you everyone, as you can expect I haven't been around much with beginning of school starting.  ... View more

Great question, and would also be cool to know if they can get integrated with a support system for IT folks. ... View more

Well a capture is catching all packets and you'd normally see the Sonos communicating with some external server.  If the info is encrypted you won't see that it is in fact communicating it's local IP.   You could also capture on the default gateway of the sonos for messages going to 224.0.0.251 on udp 5353 to capture the mDNS entries.  But that will only prove the Sonos is using mDNS outside of the logging in to the sonos account.   If a capture is too much you can of course create a firewall rule to match all traffic coming from the sonos and log the traffic to a syslog server.  Followed by another rule that matches traffic from your devices IP towards the sonos. ... View more

Hi Ritchie   I have a couple properties (I both own and manage). One has 20 APs and the other 5. I have a few words of advice here as we have a lot of ground to cover on both. This is all based on my experience over the last 18 months Your mileage may vary.   I began trying to use Meraki kit for all of my PtP links. We're talking 200 feet max. In these cases, MR74s with sector antennas have generally provided solid links. Not too quick but sufficient for most needs - 140mbit or so is the highest Ive seen with the right antennas.   But it doenst always work right. I find the devices creating the mesh link need to be rebooted more often than Id like.     There is a feature called the "wired hop" that I have attempted to make use of because it has a lot of potential (https://documentation.meraki.com/MR/WiFi_Basics_and_Best_Practices/Extending_the_LAN_with_a_Wireless_Mesh_Link) and its still immature. For example... I have one property where I have a repeater MR74 with a sector antenna pointed directly at a gateway MR84 150 feet away and much further away from the repeater 74 is another repeater 74 with antennas pointed in the complete opposite direction. The two repeaters are connected via an unmanaged switch inside the building theyre mounted on. The docs state that the device with the best connection will allow its connection to be used by the others. One would think the 74 with the antennas pointed DIRECTLY at the gateway would be that one, but somehow, even after replacing *all the hardware*, the one with the antennas pointing in the opposite direction still gives a better aggregate connection score and often handles the connection for the rest of the APs on the switch. Which is insane. I have spent hours with support. Nobody can figure it out.    Recently, for my PtP needs I have explored other options from other vendors. The Ubiquiti Gigabeams and Nanobeams used in a pair to make a PtP link work *very well*. I still prefer Meraki for everything else in my network. I would not switch over for anything at this point. But for this one think I have found their implementation quite robust.  ... View more

Yeah that sounds really involved just to get a wireless link across a long field or over a road. We have both situations here and I was skeptical but it has been rock solid at over 1.5gbit. ... View more