I am very grey on this one.   I *think* support has an option to configure WAN2 as a "cellular" interface (or perhaps it was the other way around).  You still use WAN2 like normal - just the MX thinks it is a cellular interface in the dashboard now. You can then use the cellular firewall rules. https://documentation.meraki.com/SASE_and_SD-WAN/MX/Design_and_Configure/Configuration_Guides/Firewall_and_Traffic_Shaping/MX_Firewall_Settings#Cellular_Failover_Rules   ... View more

That is inspired thinking. ... View more

This is actually getting a little bit more complicated now.  My head is still spinning with all the options.   You can now do this if you use BGP over IPSec (over a VTI). https://documentation.meraki.com/SASE_and_SD-WAN/MX/Design_and_Configure/Configuration_Guides/Site-to-site_VPN/BGP_routing_over_IPsec_VPN   "BGP peering over IPsec VPN tunnels can be enabled on the Meraki Security Appliance. This unlocks new dynamic routing solutions, including routing between AutoVPN and IPsec VPN peers"     ALSO, because 19.1 added VTI support, and you use static routes to route traffic over a VTI, you should be able to redistribute that over AutoVPN as well.   I have not used or tested either of the above configs. ... View more

If you plug a notebook into the printer VLAN on the switch - does it work? If you attach a notebook to the SSID that the printer uses - does it work? ... View more

I found the documentation too sparse to really help.  However, the YouTube series has been excellent.  That spike in watch hours - it's me!   The customer I did this project for has received the new solution well.  I think they much prefer to have it hosted inside the Meraki Dashboard, rather than running separate Python scripts.  So I guess I will be doing a lot more work in this area.   The next thing I need to get my head around is the required Meraki permissions.   The problem with the Cisco Community is finding anything.  Thank you for your link. For example, I just went back to the home page and couldn't figure out how to navigate to the Cisco Workflows page. I can't find a search to locate the group; you can only search posts. It doesn't appear in any group index I can find.   I can only find it again using your link on this page.   ... View more

I find the Cisco Community hard to use.  It's like drowning in a sea of content. ... View more

Good tip!  I might try this out next time. ... View more

Can you temporarily turn off "Shape traffic on this SSID" to either prove this is or is not the issue.   If it is the issue - how does it compare to other working sites? ... View more

Anything configured under Wireless traffic shaping?     ... View more

The syslog messages are sent directly by the device.   If you do a packet capture on the edge do you see udp/514 traffic? ... View more

I don't see any action to create an array? >just put your string variable in square brackets.   Once I select a variable, it won't let me edit the field anymore to add brackets.   I can't see any actions like "Compose with JSON".     I ended up creating a one-line "Create With Python" script action like: output = ["variable"] It kinda seems wrong to drop back to coding when everything else is GUI point and click based.   ... View more

If you visit the below URL - are you attached to that AP? http://my.meraki.com/   Check out "Wireless Health": https://documentation.meraki.com/Platform_Management/Dashboard_Administration/Operate_and_Maintain/Monitoring_and_Reporting/Meraki_Health_Overview   Also, click the client in the dashboard and review the roaming events.  Is the client making any bad decisions? ... View more

Try enabling these two settings:       You want the system to avoid changing the channels while they are in use, as it requires clients to be good enough to roam, otherwise they'll get cut off.   https://documentation.meraki.com/Wireless/Operate_and_Maintain/User_Guides/Radio_Settings/AI_-_RRM#AI_Channel_Planning ... View more

What is the purpose of the three different SSIDs?   Could you use a single/24 across everything (to keep life simple) and use wireless firewall rules to control access to various systems? https://documentation.meraki.com/Wireless/Operate_and_Maintain/How_Tos/Firewall_and_Traffic_Shaping/MR_Firewall_Rules   Is using NAT mode for one of the SSIDs to hide its addressing an option (especially if one of the SSIDs is just for guest access)? https://documentation.meraki.com/Wireless/Design_and_Configure/Configuration_Guides/Client_Addressing_and_Bridging/NAT_Mode_with_Meraki_DHCP     ... View more

This is the way. ... View more

If you do a "plain old Internet speed test" at each site, are you seeing the expected Internet throughput? ... View more

Are there any funny speed limits configured here?     ... View more

Is SMB bandwidth throttling enabled?  You should be able to check this from PowerShell with: Get-SmbClientConfiguration | Fl EnableBandwidthThrottling   If it is, you can try turning it off with: Set-SmbClientConfiguration -EnableBandwidthThrottling 0   ... View more

Have you tried my hack of disabling the performance cookies? https://community.meraki.com/t5/Dashboard-Administration/Sluggish-Dashboard-View-Failed-to-Load/m-p/282232/highlight/true#M11203   ... View more

Are you wanting to prevent wireless clients talking to LAN clients, or prevent wireless clients talking to each other, or some other kind of isolation? ... View more

On both the server and the workstations, enable TCP timestamping (helps a lot with asymmetric performance issues).   netsh int tcp set global timestamps=enable   ... View more

Are you running a current stable or better firmware?   Do your hubs have the public IP addresses directly on their WAN interfaces, or are they running through NAT? ... View more

!!!  Painful.   Have you got an intern that can do a lot of mouse clicking for you? ... View more