have your RADIUS server return the filter-id attribute which will correspond with  the name  of a locally defined group policy that is configured on the Meraki network. You can perform wireless VLAN overrides and traffic shaping,  L3 and L7 FW rules in this manner, all locally. For your central MX you can define the group policy and manually bind that policy to the interface. ... View more

Block all access until sign on is complete is fine and works great. the doc from the WBA lays it all out and it does work. That is not to say that an end user will not have issues with their device from time to time due to whatever reason but in 99.9% of those cases it is not the AP or the RF. It starts with end user education about how your wireless environment  operates.  ... View more

that screenshot shows no uplink... ... View more

https://documentation.meraki.com/MR/MR_Installation_Guides/MR36H_Installation_Guide   Same holds true for any additional LAN ports on any MR model   ... View more

it will not ... View more

I like your use case.  The flexibility that Cisco Meraki provides is what makes their product offering so  desirable.. Was thinking that although you cant have L2 iso with a shared PSK you could use the differing passphrases for each PSK for each "office" with a VLAN override and limit the exposure to those from the same office while using L3 rules to allow access to other service on the "resident" network/VLANS.   ... View more

Not if its another Meraki AP.... ... View more

MR57 require more than af or at at full operation if you are not using the USB ports you should budget 30 W of power for each MR57 at a minimum. 802.3at  at 30wx21=630W. Cable lengths per AP will vary drastically, best practice is to assume the maximum draw. as your APs power will fluctuate depending on the Tx power and number of users connected, channels in use,  etc. etc. etc. etc.   A 355-48X should be using a 1025W PS not a 740... ... View more

Time to update the legacy policy and match your passphrase at each site and then you can do standard bridge mode with L2 isolation enabled. Update your passphrase on an ongoing  and routine basis since WPA2-PSK is busted ...or go WPA3-SAE from jump street. ... View more

How many guests on any given day? is it a true transient network with hundreds of unique users or is it just a handful each day?    See if any of these work for you. https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Splash_Page ... View more

Management frames arent encrypted unless u are using 802.1w .... Keys really only matter if you are doing 802.1X you wuld need the 4 way handshake as well as a wired packet capture.. anyone can decrypt PSK (WPA2) with enough time ... View more

Or use a third party radius provider for a captive portal with a rotating passcode. That service will  send emails to whoever you want on what ever cycle you tell it. After its set up and for extra measure, I have a certain team recipient that  updates an announcement only mailbox that anyone can dial into that has access to our voip phones. Codes get updated at the halflife of the period you mandate so at any given time there are two valid codes. One new one and one on the way out. Anyone can call and be told the code for acces  with 5 digit dialing announcement.     ... View more

The ESK-1 is  802.11ax (esque).... the ESK-2 is 802.11ax with 6GHz   Ekahau Sidekick® https://www.ekahau.com/wp-content/uploads/2020/05/Ekahau-Sidekick-Data-Sheet-2.pdf management frames,  probes, and beacons are what really matter. 5 GHz is 5GHz amd the basic rates are the basic rates...   ... View more

And an actual PSK....  ... View more

At first glance Psk requires an encryption mode ... ... View more

Just a hunch here... The user has to to complete/accept the enrollment in the first network before you can add them to the the others. . ... View more

This is expected behavior. The recognition of a captive portal is up to the browser/OS that is being used. Has been this way for many many years. WBA has a good rundown on what does what. https://captivebehavior.wballiance.com/ ... View more

It shows the wired MAC.  run that mac against your switch ports and go unplug it. It is still on according to what you are showing... Last seen 2 seconds ago... and its been there for at least 2 months. Perhaps some "well meaning" person who has a subscription to Network World did this ... ... View more

Google TV or a Google Chromecast with Google TV... Also Android can only have one connection active at time if it has an Ethernet port unplug it. ... View more

Not quite... it all dependent upon the client radio chains and actual PHY rate used the rates are as shown below. Granted I am giving the upper PHY rate and best case  connection scenarios your milage may very well vary...   a 2x2:2 ax client radio @ 2.4 or 5 GHz wide 20MHz wide channel tops out at MCS rate 11 @286.8Mbps so max throughput would be around 14OishMbps   If ac 2x2:2  it tops out at MCS8 at 173.3mbps which about 80Mbps   a 2x2:2 ax client radio @ 2.4 or 5 GHz wide 20MHz wide channel tops out at MCS rate 11 @286.8Mbps so max throughput would be around 14OishMbps   If n 2x2:2  it tops out at MCS7 at 144Mbps which about 72Mbps ... View more

Postman wont update Meraki's spec file at Meraki.io 😁 ... View more

Whilst you may be a competent engineer you didn't tell us anything about your  actual client's capabilities that you are using for testing.   What is your actual PHY rate and channel width? Are you connecting to ROOT AP or a Repeater?  What are you using to ascertain the speed of your wired client? What are you using to ascertain the the speed of your wireless client?   Windows, MAC Intel or MAX Mx, ioS or Android?   Chipset of your wireless client?    I can go on forever about what could be causing the issue.     ... View more

I don't disagree, outside of SAML, Meraki needs RBAC across the board. I hear this forthcoming...However, MQTT would allow for proactive automations vice relying on someone to pull the data manually... . MQTT aside you can also set up webhooks to report sensor conditions to Webex, Slack. MS teams etc....to report when temps or whatever alert element hits a certain level or when a condition is met. ... View more