Also very important for MR: The layer 2 marking of the traffic headed downstream to your client needs a tag to put it in the correct WMM queue. Wireless has four queues: Background, Best effort, Video, Voice with each their own max slots times for waiting before tranmission as well as transmit opportunity. If you are VLAN tagging traffic on the SSID you can literally set the PCP value (6 for voice, 5 for video, 1 or 2 for unwanted traffic).  However if it is untagged I'm not sure the AP will tag it correctly, I would have to lab this up and capture the wireless traffic. So yes setting it on both is important. ... View more

Welcome Berlin, of course you're lucky, you can manage an entire network infrastructure from your desk, with no requirement for on-site visits to do the day-to-day duties! But if you want to be extra lucky, just continue participating in the community giveaways and contests, then you can get some sweet swag, if you get extra you can send it by post to me 😄 ... View more

Welcome to the community space, we're glad to have you here, 5 years using Meraki you must have run into some interesting projects I bet, thanks for joining us. ... View more

@Bettencourt, Thank you for your input. I will look into this and share my thoughts. ... View more

The Client VPN setup should be the same, I was on OS X Catalina, Big Sur, and now Monterey, and the configuration has never changed.   https://documentation.meraki.com/MX/Client_VPN/Client_VPN_OS_Configuration#macOS ... View more

As @PhilipDAth mentioned the test user does not need to exist. If you are seeing this error message it is because at least one user recently failed to authenticate with the radius server or a recent dashboard radius server test failed. Each SSID that has radius enabled will have an option in the setting called "Radius Testing", by default this option is set to enabled. If enabled, the Meraki devices will send every 24 hours an Access-Request message to these RADIUS servers using  'meraki_8021x_test' to ensure that the RADIUS servers are reachable.  If a RADIUS test fails for a given device it will be tested again every hour until a passing result occurs. A subsequent pass will mark the server reachable and clear the alert, returning to the 24-hour testing cycle. Therefore if you are seeing this alert, one or more of your radius servers failed to respond or took too long to respond, if you do not want the dashboard to run these tests you can disable the option under your SSID settings. https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Alert_-_Recent_802.1X_Failure ✌️ ... View more

Hi Philip,   Thanks for the suggestions, appreciated. However, the only option that fits for purpose in this case from the Day 2 perspective is to override 2FA. Obviously, since it is not technically possible, we will need to put a small IAM process around this account.   Regards,   JC ... View more

Anyconnect does not work with all MX's, make sure you check into it before buying.  We were told the MX-64 would have Anyconnect but now it seems not to be.  ... View more

What does config using DNAS provide that cannot be done inside Meraki dashboard using following doc: https://documentation.meraki.com/MR/Other_Topics/Hotspot_2.0_Configuration_Example ... View more

@Aaron_Wilson thanks, I saw 4.15 alerting for the last month or so, so have been looking for a 4.16 ever since.  I didn't realise that the stable code was also warning! ... View more

It is most likely the app identifier that is wrong. You can find any Android app identifier by opening the AndroidManifest.xml inside .apk file, it will be the first name following the meta-data tag. ... View more

Thank you all for your help. Solution with templates that was suggested by @Bettencourt is what I was looking for!   @cmr thank you as well for your info, I didn't know that.   Regards, Boza ... View more

The public IP can be anything public. The LAN IP must be part of a configured subnet. https://documentation.meraki.com/MX/NAT_and_Port_Forwarding/Configuring_1%3A1_NAT ... View more

@cmr @Bettencourt I created the VPN connection on the Windows 2016 server, and all the configuration are correct but the connection is not established at all  I checked the Meraki setting for all the OS but could not find Windows 2016 server in the list  ... View more

If your dashboard is based in Europe, you can forge a client by going to Network-wide > Clients, tick a client's box, and click the Forget button on the top left. You can also pre-configure a client and give it a custom name:   https://documentation.meraki.com/MX/Group_Policies_and_Block_Lists/Pre-configure_Network_Policy_for_Client_Devices ... View more

Thank you very much. Appreciate your feedback.  ... View more

https://community.meraki.com/t5/Security-SD-WAN/Client-VPN-Authentication-on-n109-failing-using-Meraki-auth/m-p/128807#M32047   Check out my post.    Im having the issue where users cant authenticate using cloud auth. ... View more

Cool thanks! Done. ... View more

@Lkirby No you cannot hide apps in MacOS. The finder is very different than the homescreen. Thats not to say Apple won't go down this path in the future as MacOS and the way its implmented now with a seperate data volume is very similar to iOS.     ... View more

Thanks all. I will update to 28.3 Beta and give it a try. ... View more

HI all bro @Bruce @cmr @Bettencourt    Thanks for the comment  , The MX450 at DC , we just use Router for upstream ,  no firewall block. Internet direct to Router , then route to Meraki MX450.   like i mention , Meraki MX450 doing vpn concentrator , we only can use only 1 wan , can't use 2 wan like Nat mode. so i'm not sure this could cause the problem. ... View more

Just to ensure the correct expectations are set. Warranties are non-transferable between parties, even if a cloud license is purchased, so in the future, if anyone besides the original customer who purchased the device tries to RMA this device it will be flagged by the returns team.   https://documentation.meraki.com/General_Administration/Inventory_and_Devices/Cisco_Meraki_Devices_purchased_Second_Hand   👍 ... View more