No one should be using 3des for anything new.  Does aes128 work instead? ... View more

The vulnerability affects the AnyConnect VPN client system.  Meraki does not have AnyConnect support. ... View more

each MX needs to be able to see the other MX on each VLAN (the MX runs VRRP between each internal layer 3 interface).  You can use access interfaces to achieve this if you like, but trunk interfaces tend to be more efficient on ports when there are more than just a handful of VLANs.  There is also nothing to stop you using both trunk and access interfaces at the same time, as needs may require. ... View more

I am assuming you are talking about the built in Meraki speed test.   The throughput test only includes its throughput, while the uplink includes that plus any other traffic being generated by your site.   Also you need to consider the measurement basis.  I don't know, but the speed test might be av instantaneous reading, or an average over the duration of the test, while the uplink results might be a 60s (or some other period) average. ... View more

Are you wanting the same layer domain to span all the sites and exit just one of them?   Or do you just want to use the same VLAN number at each site, but that VLAN will go out the local MX and not not be connected to the same VLAN at other sites? ... View more

@Adam, OM3 is orange.  OM4 is raspberry pink.  I tend to use OM4 these days as it has better 10Gb/s support.  And if someone is putting in cabling I also recommend using OM4 even if they are using Gigabit so then can upgrade to 10Gbe in the future. ... View more

Bummer, that is a real shame. ... View more

Alas I can only understand English.   But it looks like you have a certificate issue.  Have you got all the Windows updates applied?  You might be missing a root certificate update.   Are you using an internal RADIUS server? ... View more

Why are you using static IP's?  That is a very painful way of doing it.  If it is because of RADIUS, why not use a prefix list in the RADIUS server instead of the individual IP addresses?   I can't remember the last time I statically configured an access point.  It is just not something that is needed anymore. ... View more

You might be thinking of switches.   You can't stack MX units. ... View more

The problem with "Adaptive" is that it only works with Apple mobile devices. ... View more

From memory, I normally just go to the inventory, select the second MX and add it to the same network as the primary and it adds it as a warm spare.  Pehaps give that a try. ... View more

Another question I often ask clients is; if I enable 802.11r 99% of your clients will get an improved roaming experience, but 1% of the devices, mostly very old devices, may no longer connect.  Do you want to sacrifice the benefits gained by 99% of the users to still support the 1%?   I think every time they get me to turn on 802,11r.  Often it is just a commitment to replace the small number of those very old devices that don't support it.  Hey they just spent a pile of money putting in a nice new Meraki WiFi network - while cripple its features? ... View more

I nearly always enable 802.11r.  I don't have that many compatibility issues. ... View more

I haven't won a gnome for about 60 days, so I have entered! ... View more

I suspect it will support both.  The authentication method is a negotiated parameter of the two ends (both have to agree which to use, and then they use it). ... View more

The physical management port is only used when you plug your notebook into it to give it an initial configuration.  Other than that it should not be plugged into anything.   While plugged in and connected to the local status page you configure the management IP - which has nothing to do with the management interface.  This IP address is used to talk to the cloud via one of the ports on the front of the switch.  If you don't configure anything the switch will get an IP address via DHCP from the native VLAN.   I would not personally use the VLAN plan you have given.  You don't talk to the management IP addresses with you might with a Cisco Enterprise switch (when doing telnet/ssh/https).  The IP is used mainly as a "client" talking to the Meraki cloud.   Your stacking plan sounds fine. ... View more

From the Dashboard go Help/Cases, open a case, and then try ringing the number and use your case number. ... View more

You can use this API method: https://dashboard.meraki.com/api_docs#update-the-attributes-of-an-ssid and set "enabled" to false. ... View more

Meraki does not so much do point to point links, but instead uses MESH network - which suits your needs even better.   Have a look at this: https://documentation.meraki.com/MR/WiFi_Basics_and_Best_Practices/Mesh_Networking ... View more

pps. It is really bad if you have something that still has SSLv2 enable.  Really bad. ... View more