You can't disable the device to the best of my knowledge. You can generate an alert when someone leaves or enters a region. I have done this before for one of my customers. I put the whole country in a geo fence area so they know when someone leaves. Another trick is to put International airports in a geo fence area. If it is an iOS device and it is in supervised mode you can disable data roaming. You can do the same for Android devices that are in Device Owner mode. On an IOS device you could also enable "lost" mode.
... View more
I have not seen anything in Systems Manager that lets you deploy your own certificates. SCEP (Simple Certificate Enrollment Protocol) is a way for a device/person to easily request a certificate, have it approved in some way, and then deployed to the device. You would have to deploy your own PKI infrastructure to make this work.
... View more
So iPerf was reporting 17 Mb/s - a similar result. Have you done a speed test to make sure your Internet circuit is the speed it is meant to be?
... View more
Ok, that is a tough one then. You are basically getting 2/3 of the bandwidth you should be (assuming nothing else is using the bandwidth).
... View more
Another option would be to force the VPN out the other uplink at the other large site and confirm that the speed goes down. Perhaps the uplinks are transposed to how you think they are.
... View more
The "other" large office has a 30/30 circuit and a 20/5 circuit. The 30 Mb/s circuit should give you around 3MB/s and the 20Mb/s circuit should give you around 2MB/s - if they have all of the bandwidth available. This smells like it is using your 20Mb/s circuit.
... View more
I'm surprised uses can remove the Meraki app when supervised. Are you sure? I don't think there is much control with regard to location services. Android seems to work nicer in this space.
... View more
It is not possible to get 210 MB/s on Gigabit Ethernet. The maximum you can get is around 100MB/s. Perhaps you meant 210 Mb/s - but that would not be a great result. Lets test the MTU theory. Using PPPoE often causes an MTU squeeze. You can do this on either the server or a workstation to test. If it solves the performance issue on a workstation then you'll need to repeat it on a server so everyone benefits. Use this command to display all your interfaces: netsh interface ipv4 show interfaces Note the interface number that is configured with the IP address used for communication. Lets pretend it is interface 10. Then issue this command: netsh interface ipv4 set subinterface "10" mtu=1400 store=persistent To undo this repeat the command with an MTU of 1500. This change will affect all new TCP connections.
... View more
Buggar, Ok. I have seen a lot of issues with Hyper-V and NIC drivers. Can you confirm that the issue does not happen on the local LAN - that you can copy a file over the local LAN and get near 100 MB/s (that is Megabytes/second - assuming everything is Gigabit connected)?
... View more
There is an issue with the current software. You can either move to the beta software images, or set the content filtering list to "fast". When the list is set to "full" it often doesn't block connections until the users has been accessing the URL for a while.
... View more
Please try this command on the server (and ideally) on the workstation involved. It doesn't need a reboot. It affects all new TCP connections (but not those already negoiated): netsh int tcp set global timestamps=enabled You can undo the setting by setting it back to disabled. By default windows bases its round trip time on the average of the send and receive time. This works ok if the send time is the same as the receive time for a packet. It does not work very well on asymmetrical circuits. If you look in Wireshark you'll see a lot of duplicate packets and retransmits (if you are affected by the issue). Enabling timestamps causes Windows to calculate the sending and receiving time separately, rather than just averaging them. This stops the retransmission issue.
... View more
To the best of my knowledge, the replay window size is not a negotiated parameter. On Cisco Enterprise kit you can configure it globally or per VPN.
... View more
I have seen issues like this before (not just with Meraki). If iPerf is getting 17/18 MB/sec and windows file transfers are dead slow it is almost certainly a windows TCP stack setting that needs changing. If you tell me what Windows OS you are using for the two boxes you are copying the file between I'll recommend some settings for you to try changing. I bet we can get this going considerably faster,
... View more
It is the client that makes the decision to connect or disconnect. It may be that you need more access points to increase your coverage. It may be that you need to update your WiFi drivers.
... View more
I have never tested it, but I have been told that Cisco Meraki kit does not check the manufacturer ID burned into the SFP ROM (unlike Cisco Enterprise kit which does).
... View more
These are the instructions to factory reset Meraki devices. https://documentation.meraki.com/zGeneral_Administration/Support/Resetting_Cisco_Meraki_Devices_to_Factory_Defaults You should be able to plug the WAN port of the MX64 directly into the cable modem or your other box. If it doesn't work try power cycling the box you are plugging into (cable modem or other box as the case may be).
... View more
