You are burning the midnight oil!   This all looks great. ... View more

I did include a link to the official documentation, and quoted the text from it that says you will get packet loss unless you deploy using a seperate VNET ... 🙂 ... View more

I don't know the answer, but check you are using current stable or better firmware. ... View more

You could consider using Secure Connect licencing (which includes Umbrella).  You might also be able to do this with Umbella SIG as well.   [Untested] You could then build a site to site VPN from Umbrella to Azure.  Umbrella would then be responsible for your routing.   Jump down to "Site Interconnect" in this document.  On the right hand side you can see that you can add IPSec connections from Umbrella to DCs. https://documentation.meraki.com/CiscoPlusSecureConnect/Cisco_Secure_Connect_-_Solution_Design_Overview   There is some more more info about using IPSec with Umbrella here: https://docs.umbrella.com/umbrella-user-guide/docs/tunnels     ... View more

That page is also s-l-o-w to load. ... View more

If you are referring to client VPN (users outside of your network connecting in), turned off client VPN on the MX.   If you are talking about things like BitTorrent, use a layer 7 firewall rule. https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Creating_a_Layer_7_Firewall_Rule       If you are talking about privacy VPNs, use content filtering and block these two:     ... View more

You have to put the VMXs into their own dedicated VNET.  If you put them in the same VNET as servers you get packet loss.   https://documentation.meraki.com/MX/MX_Installation_Guides/vMX_Setup_Guide_for_Microsoft_Azure "Do not associate the vMX SD-WAN Subnet to the same route table that is associated with the resources subnet, this is known to cause packet loss."   "Deploy a virtual appliance into a different subnet than the resources that route through the virtual appliance are deployed in. Deploying the virtual appliance to the same subnet, then applying a route table to the subnet that routes traffic through the virtual appliance, can result in routing loops, where traffic never leaves the subnet.: ... View more

What are you using to measure the 500/200 speed?   Is the speed better after the MX has had a reboot? ... View more

asyncio allows you to do operations in parallel.  When you have a lot of API calls to make, it is much faster.   This page has some introductry info on asyncio: https://github.com/meraki/dashboard-api-python?tab=readme-ov-file#asyncio   And you can find examples here (they all start with aio*.py): https://github.com/meraki/dashboard-api-python/tree/main/examples   ... View more

Well done everyone. ... View more

I bet you have uplink shaping enabled.         ... View more

Try using my client VPN wizard.  It sets a registry entry which improves the reliability when working behind a NATed connection. https://ifm.net.nz/cookbooks/meraki-client-vpn.html     # Create registry key to allow connections to an MX behind NAT (Error 809) New-ItemProperty -Path HKLM:\SYSTEM\CurrentControlSet\Services\PolicyAgent -Name AssumeUDPEncapsulationContextOnSendRule -Value 2 -PropertyType DWORD -Force | Out-Null   ... View more

Are you sure you don't have nat or port forward configured? Have you got NO-NAT enabled? ... View more

Have you looked into the org wide calls, which lets you retrieve stats on all devices in a single API call?  Maybe one of them has the info that you need?  Some examples: https://developer.cisco.com/meraki/api-v1/get-organization-devices-availabilities/ https://developer.cisco.com/meraki/api-v1/get-organization-devices-uplinks-addresses-by-device/     As a matter of interest, are you using asyncio or standard blocking IO, and how many devices are you talking about?  10, 100, 1000?   ... View more

You can search across the whole organization for a mac address.  I also note (just tried it) you can also search for a client name.   Put it in "Search Dashboard" in the top righ hand corner.     ... View more

WPA3 has poor device compatibility when it comes to IoT devices.  Many just don't work at all. If you have a well defined environment (such as all computers are the same band and model) you should be able to get away with it.  Guest WiFi probably wont work well.  Many phones wont be able to connect.   The only way I have been able to get WPA3 to work is to create a new seperate SSID for it. ... View more

I think he mentioned rainx. https://www.rainx.com/original-glass-water-repellent/ ... View more

You can also try using narrower bands, like 40Mhz or even 20Mhz, in case you are getting interfence.   In a central business area I typically use 20Mhz bands because of high channel usage by others in the area. ... View more

Good to know.  Thanks for letting everyone know. ... View more

+1.   Also, if you have a legacy camera deployment using coax cables, you can  run the power along the coax and use a "MV Low Voltage Power Adapter (LVPA)" to power the camera. https://documentation.meraki.com/MV/Physical_Installation/MV_Low_Voltage_Power_Adapter_(LVPA)_Installation_Guide   ... View more

Thanks for joining the community.  What part of the world are you from? ... View more

Third-party integrations like Splash Access allow you to do this. https://www.splashaccess.com/throttle-bandwidth-hogs-with-realtime-monitoring-policies/   ... View more

Make sure you disable 2.4Ghz on the SSID.  It makes the performance suck. ... View more