Meraki

alemabrahao

I believe you should contact support in this case.

alemabrahao

It should work. Have you tried contacting support? They should be able to help you.

alemabrahao

I personally haven't used it and I find the template simpler and more practical. Furthermore, you don't need to migrate all networks to the template at once and can do it during a scheduled maintenance window. But if you want to use AI Assistant for this, I believe it's something you'll have to try and validate yourself. The video seems to be quite explanatory.

alemabrahao

No, it's not supported on the MX. https://community.cisco.com/t5/security-knowledge-base/how-to-integrate-meraki-networks-with-ise/ta-p/3618650

alemabrahao

You can use a templates for this. https://documentation.meraki.com/Platform_Management/Dashboard_Administration/Design_and_Configure/Organizations_and_Networks/Managing_Multiple_Networks_with_Configuration_Templates#MR_-_Wireless_Network_Templates

alemabrahao

That's what it looks like, right?

alemabrahao

Are you sure it was the MR46? I don't recall seeing its end-of-service-life announced, and no official documentation confirms that.

alemabrahao

Could you please share this information so it can help others who have questions about it?

alemabrahao

I understand that Meraki defines it as 0 when the AP does not have a valid measurement, which in this case is common and normal in fast roaming. So I think the correct way would be to use "after" protocol and duration to assess roaming quality.

alemabrahao

I've seen some people recommending Aruba ClearPass, but I personally don't know it.

alemabrahao

In Cloud Operation Mode, Catalyst initializes with a Meraki agent that automatically enables DHCP on the uplink ports, obtains an IP address, attempts an outbound connection to the cloud, and finally registers using the Cloud ID. Can you verify on your DHCP server if the switch is actually receiving an IP address?

alemabrahao

Have you tried contacting Purple yet?

alemabrahao

According to multiple official and industry sources, Splash Access merged with Purple WiFi on November 10, 2025. This merger brought Splash Access under Purple’s global guest‑WiFi platform and operational structure. Purple merge with Splash Access

alemabrahao

Excuse the question, but wouldn't it be possible to extend fiber optic cable to L2?

alemabrahao

I'm not sure, but although the documentation says that BPDUs should be forwarded, in practice, I understand that Meraki wireless mesh links don't provide transparent L2 bridging for STP, and BPDUs frequently fail to traverse the mesh.

alemabrahao

And how do you test this to make sure it's not working? I'm asking because of this small observation. Note: ICMP traffic is not subject to traffic shaping rules. As a result, Flow Preference will have no impact on ICMP traffic.

alemabrahao

Have you tested this yet?

alemabrahao

Could you please show me how you are creating your traffic forwarding rule?

alemabrahao

I think that to evaluate roaming quality, you can use the following criteria: duration: <150 ms = good rssi.after: >35 (-65 dBm) = good

alemabrahao

I'm not sure, but I believe you don't lose visibility of the Syslog. But you do lose visibility of the global Layer 3 firewall rules, because those rules stop being applied when a Group Policy with custom firewall rules is applied. You still see client flows, URLs, security events, etc. in the Syslog, but they reflect the Group Policy rules, not the global Layer 3 MX rules. At least that's how I understand it.

alemabrahao

A value of 0 does not mean 0 dBm, it simply means Meraki had no usable data for that moment.

alemabrahao

No, filtering only .11r events and treating denied as bad roaming is not valid. A denied .11r FT attempt does not indicate roaming quality, and Meraki classifies roams as good or bad using roaming time + RSSI, not the .11r status.

alemabrahao

Is it possible to test this link directly on your device or another one? Just to make sure it's working as expected.

alemabrahao

First question, is the second ISP only connected to the active MX ? If so, okay. But consider that in case one of the MXes fails, wouldn't it be better to have a link on each MX ? The /29 is necessary because the /30 only provides two usable IPs, in this case the gateway and its MX. Since each MX needs an IP (ideally), you need at least one /29.

alemabrahao

If you've already checked everything and it appears to be okay, I suggest you open a support case.

About alemabrahao

alemabrahao

Alessandro Abrahao

Community Record

Badges