What is the minimum bitrate setting? Try disabling VHT/HE mode.     ... View more

Hi @david_n_m_bond    You can submit a feature request using the "Give youe feedback" button.   https://documentation.meraki.com/General_Administration/Other_Topics/Give_your_feedback_(previously_Make_a_Wish)   ... View more

To tell you the truth, I have a scenario similar to yours, two HUBs in different data centers and both with a static route to the 10.0.0.0/8 network, and I have no problems at all. ... View more

Instead of a broad 10.0.0.0/8, define only the subnets that are actually behind the core.This allows AutoVPN to take precedence for more specific prefixes.  ... View more

There are some reports of issues with this version, I think the best thing to do is open a support case to let them know about the issue and help find a solution. ... View more

Microsoft has not released a migration tool that supports changing the Public IP SKU for Meraki vMX deployments. Re: Change SKU from basic to standard on IP address on Meraki VMx - The Meraki Community   In this case it is recommended that you redeploy vMX if you need to migrate to a standard SKU public IP. ... View more

No, you cannot manually configure speed or duplex settings on Meraki APs. Meraki APs always rely on auto-negotiation for link speed and duplex.  ... View more

AVB is not supported on the Catalyst-M series switches managed by Meraki. ... View more

Meraki’s RBAC model currently does not restrict visibility of untagged ports, only configuration rights are limited.   Managing Dashboard Administrators and Permissions - Cisco Meraki Documentation ... View more

Smart Client is also supported on mobile devices.   https://www.draytek.com/products/smart-vpn-client/ ... View more

For mobile you can use the device's native client.   https://documentation.meraki.com/MX/Client_VPN/Client_VPN_OS_Configuration ... View more

In this case, you would have to configure a tunnel between the ISP's modem and the MX, and since it is a home network, I don't believe that all ISPs will allow you to configure this.   https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-Site_VPN_Settings#Non-Meraki_VPN_Peers   Another option would be to create an inbound NAT on the MX for your Alcatel's IP, but I personally think this is insecure, since you would have to open it to any source since you are using dynamic IPs.   https://documentation.meraki.com/MX/NAT_and_Port_Forwarding/Port_Forwarding_and_NAT_Rules_on_the_MX   The best way I see is if you could make an MX available for each location and then work with Meraki's Auto VPN.   https://documentation.meraki.com/MX/Site-to-site_VPN/Meraki_Auto_VPN_-_Configuration_and_Troubleshooting   ... View more

I suggest you open a support case so they can investigate. ... View more

When you run a throughput test and have Auto VPN set up, the test traffic goes through your VPN concentrator. This checks how well your VPN connection is working.   The Meraki Dashboard always talks to your devices through the main internet connection (uplink), no matter what your routing settings are. This ensures reliable management of your network. So, the test focuses on the VPN path, while the dashboard communication uses the direct internet path.     ... View more

As I said, it can be reduced, but with a simple port scan it is possible to discover the open ports on your network, so it won't make a difference in the end. ... View more

PlayStations (especially PS5) do not use standard HTTP GET requests on port 80 to detect captive portals and as far as I remember, Meraki’s splash page redirection only works with HTTP traffic on port 80. ... View more

It's a little older., but, according to Microsoft KB5043417, the update introduced a security enhancement that enforces stricter compliance with RADIUS standards.   KB5043417: RADIUS authentication to NPS might fail with the July 2024 security update and later updates - Microsoft Support   In this case, please make sure your Meraki devices are running the latest firmware, and if possible I suggest you open a support case. ... View more

It won't work with splash page, either you create an SSID with PSK or you do a bypass.   https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Blocking_and_Allowing_Clients#Allow_List ... View more

Changing the default AnyConnect port can significantly reduce these handshake attempts, but it doesn't mean it will stop them, since you can easily find out which ports are open by running a port scan for your IP. What I really recommend in your case is to use multifactor authentication. It won't stop anyone from trying to authenticate, but it will at least make your connection more secure.   https://documentation.meraki.com/MX/Client_VPN/AnyConnect_on_the_MX_Appliance/Authentication ... View more

You can configure Kiosk Mode to allow access to a custom WebView application or a browser shortcut that opens docs.google.com, but manual sign-out between users is still required.   Instead of strict Kiosk Mode, you could try using Android Enterprise Device Owner Mode, but I'm not sure if it would work. ... View more

Meraki’s Kiosk Mode is designed to lock down a device to one or more specific apps, preventing access to system settings, home screen, or other apps. Android Kiosk Mode in Systems Manager - Cisco Meraki Documentation   I'm pretty sure that currently, MDM doesn't support multiple user profiles on Android tablets in Kiosk Mode. ... View more

Apple devices began using randomized MAC addresses for Wi-Fi connections starting with iOS 14 and macOS Big Sur. This affects how devices are identified at the network level because each connection could appear as a different device (even though it’s the same physical device).  Apple might also modify or limit the amount of system information (like the OS version) it includes in the HTTP headers or DHCP requests, which could impact Meraki’s ability to accurately identify macOS versions.   https://www.extremenetworks.com/resources/blogs/wi-fi-mac-randomization-privacy-and-collateral-damage ... View more

Meraki utilizes client fingerprinting to identify devices connecting to its network. This process uses various techniques, including inspecting DHCP requests and HTTP headers, to determine the device type (e.g., iOS, Android, Windows, Mac). While generally accurate, it's not foolproof and may sometimes misidentify devices, especially less common or older models.  ... View more

"Back out its WAN interface" means: After the MX decrypts the VPN traffic, if the destination is the Internet, by default it forwards this traffic directly out its WAN interface, using its own public IP as the NAT source address. The MX then acts as an exit point to the local Internet for this traffic, using its WAN interface as the path to the Internet. With No-NAT, routed mode hubs can forward decrypted spoke traffic to LAN next hops without NAT — but they retain their local routing and VLAN capabilities, which concentrator mode lacks. The main architectural difference is still about whether the MX is meant to route LAN traffic locally (routed mode) or act purely as a VPN concentrator (concentrator mode). ... View more

Just to be clear, if you try to use the same subnet you will get an error message. ... View more