Does by chance your server have Broadcom NICs in it? ... View more

When you ping over the VPN to the server what is the typical round trip time? ... View more

Buggar, Ok. I have seen a lot of issues with Hyper-V and NIC drivers. Can you confirm that the issue does not happen on the local LAN - that you can copy a file over the local LAN and get near 100 MB/s (that is Megabytes/second - assuming everything is Gigabit connected)? ... View more

There is an issue with the current software.  You can either move to the beta software images, or set the content filtering list to "fast".   When the list is set to "full" it often doesn't block connections until the users has been accessing the URL for a while. ... View more

Yes. I didn't have to do anything special. It just worked. ... View more

Please try this command on the server (and ideally) on the workstation involved.  It doesn't need a reboot.  It affects all new TCP connections (but not those already negoiated): netsh int tcp set global timestamps=enabled   You can undo the setting by setting it back to disabled.   By default windows bases its round trip time on the average of the send and receive time.  This works ok if the send time is the same as the receive time for a packet.  It does not work very well on asymmetrical circuits.  If you look in Wireshark you'll see a lot of duplicate packets and retransmits (if you are affected by the issue).   Enabling timestamps causes Windows to calculate the sending and receiving time separately, rather than just averaging them.  This stops the retransmission issue. ... View more

To the best of my knowledge, the replay window size is not a negotiated parameter.  On Cisco Enterprise kit you can configure it globally or per VPN. ... View more

I have seen issues like this before (not just with Meraki). If iPerf is getting 17/18 MB/sec and windows file transfers are dead slow it is almost certainly a windows TCP stack setting that needs changing. If you tell me what Windows OS you are using for the two boxes you are copying the file between I'll recommend some settings for you to try changing. I bet we can get this going considerably faster, ... View more

It is the client that makes the decision to connect or disconnect.   It may be that you need more access points to increase your coverage.  It may be that you need to update your WiFi drivers. ... View more

You can read more about it on Wikipedia. https://en.wikipedia.org/wiki/Anti-replay ... View more

These are the instructions to factory reset Meraki devices. https://documentation.meraki.com/zGeneral_Administration/Support/Resetting_Cisco_Meraki_Devices_to_Factory_Defaults   You should be able to plug the WAN port of the MX64 directly into the cable modem or your other box.  If it doesn't work try power cycling the box you are plugging into (cable modem or other box as the case may be). ... View more

Anti-replay protection is part of IPSec.  It is not a Cisco/Meraki/Juniper feature per-see.   Sometimes there can be multiple paths between a source and destination.  This can cause the IPSec packets to arrive out of order.  IPSec can only decrypt the packets if they arrive in order.   So when packets arrive out of order (or a packet goes missing) the device is allowed to buffer packets up to the "replay window size" and put them back into order.  If the missing packets have not turned up in that time it has no choice but to throw them away.  At this point you effectively have to rebuild the VPN.   On Cisco ASA's and Cisco routers you can configure the replay window size.  You can't do this on Cisco Meraki.  I have no idea about Juniper. On the whole, it is not a setting that has to be adjusted very often.  When you need to adjust it you normally only make it larger.   If you are experiencing replay window issues and the Juniper can not have its window expanded then you should probably look at the root of the issue - why are you getting packets lost or transmitted out of order so often. ... View more

You don't need to rely on humans to help them.  ... View more

Now you just need an AI engine and a quick answer option. ... View more

I seem to have lost of first reply, so here goes again.  I'm going to assume your MX84 WAN interface is statically addressed rather than using something like PPPoE.   Your options include: Get a spare switch.  Plug your Internet circuit, MX WAN port and the router into it. Use an existing managed switch.  Created a new VLAN.  Put three ports into it in access mode.  Plug your MX WAN port, Internet circuit and router into it. Ugly.  On your MX create a new VLAN.  Assign it a random subnet that is not in use.  Put three LAN ports of your MX into this VLAN in access mode.  Plug your MX WAN port into one of these MX LAN ports.  Plug the Internet circuit and router into the other two ports. ... View more

  I'm going to assume your WAN interface is statically configured, as opposed to PPPoE or something else.   Options include: Get a spare switch, plug your Internet circuit, MX84 WAN interface and the router into it. Use an existing managed switch.  Create a new VLAN.  Put three ports into it in access mode.  Plug your Internet circuit, MX84 WAN interface and the router into it. Ugly.  On your MX create a new VLAN.  Assign it a random subnet your not using.  Put three LAN ports on the MX84 into that VLAN in access mode.  Plug your MX WAN interface into one of these MX84 LAN ports.  Plug your router and Internet circuit into the other two ports. ... View more

There is also a virtual MX concentrator for access points (can not do AutoVPN).  I suspect this might be phased out now their is a vMX.   Their is also a NAT feature for branches that use AutoVPN.  It allows all your branches to have the same subnet and then to NAT them as they go into the VPN.   ... View more

There is a protocol called "Energy Efficient Ethernet" which changes the port speed down down when idle to reduce power consumption. https://en.wikipedia.org/wiki/Energy-Efficient_Ethernet   You may find your devices support this and have it turned on. ... View more

Have you considered using WPA2-Enterprise mode which prompts for only a username/password and not bothering with a splash page? ... View more

Sorry, but I think you can only download one page at a time.   Any chance you can use the filter to reduce the number of events? ... View more

I found this great article that matches what you are describing reasonably well. https://documentation.meraki.com/MS/Layer_3_Switching/Layer_3_Switch_Example?utm_source=community&utm_medium=sidebar ... View more

I don't know the answer; but I would expect the user to get prompted if the credentials were wrong - just like if you connect to it manualy and you rotate your password after so many days. ... View more

That is quite a big question.   Enable layer 3 routing on your MS350.  Create a VLAN201 on the MS350.  Put an IP address on it in the same subnet as your firewall.  Put a port into access mode, assign it to VLAN201, and plug your firewall into it.  Add a static default route to your firewall IP address.   Your firewall will also need routes for all subnets no the MS350 via the VLAN201 IP address on the MS350.   All ports that will machine machines attached should be put into access mode.   You can change the native VLAN on any port that is going to be a trunk port.  From the sound of your configuration, there wont be any need for trunk ports.   Each VLAN should have an IP address on it.     You might find it much easier to just have a single VLAN and put everything on it. ... View more