When our ISP changes their MTU to 1500 on the customer handoff interface of the NID, errors start coming up. ... View more

Allow List Applies the following settings to a client: Is exempt from all firewall rules, both Layer 3 and Layer 7 (Applies to both the MX Security Appliance and the MR Access Points) Bypasses AMP  Bypasses a Click-through splash page  Bypasses a Billing (paid access) splash page and access the network on an SSID without paying or authenticating Bypasses a Sign-on splash page without authenticating (applies to both the MX Security Appliance and the MR Access Points) Is exempt from Per-client bandwidth limit (applies to both the MX Security Appliance and the MR Access Points) Is exempt from Traffic shaping rules (applies to both the MX Security Appliance and the MR Access Points) Bypasses Content filtering on MX Security Appliance  Restricted Youtube content will NOT be bypassed by allow listed clients as it is NOT considered part of Content Filtering. IDS/IPS under Security & SD-WAN > Configure > Threat Protection will NOT be bypassed.   Note: The device is still subject to association requirements and per-SSID bandwidth limits on MR access points, as well as Uplink Configuration and Security Filtering on a MX security appliances. RADIUS attributes that would assign a bandwidth limit to a client ... View more

I did try this but that still didn't work - I will raise a case like @PaulF said. ... View more

You are most definitely being filtered if it works with LMAC . The real MAC is on a naughty list somewhere. this is why mac filtering is an ineffective tool, too easy to circumvent     ... View more

Like this?     ... View more

Muchas gracias , con lo indicado se logró evitar el bypass al control de portal meraki . ... View more

Or you can try the Passthrough Mode.   https://documentation.meraki.com/MX/Networks_and_Routing/Passthrough_Mode_on_the_MX_Security_Appliance_and_Z-series_Teleworker_Gateway ... View more

Have you checked the API documentation?  There you will find all available APIs.   https://developer.cisco.com/meraki/api-v1/create-organization-config-template/   https://developer.cisco.com/meraki/api-v1/bind-network/ ... View more

If the LED is orange you are not getting an IP or you are getting an IP and it's not getting out to the Meraki cloud. check the physical layer and dhcp logs..   You saying it works in mesh mode points to the physical cable or ports being faulty. I have seen APs power up with bad cables that kill data but will still supply PoE..... Also its Cisco Meraki, if you have a license RMA the device.  ... View more

On the switches page you can add the column Firmware Version and then you will see them all as below (usually with Name and MAC address columns that I have removed to post here:     ... View more

You dont have gp attacher to a vlan? What is your l3 fw rule at the moment? How do you verify its not working when the gp is attached ... View more

Take a look at https://support.umbrella.com/hc/en-us/articles/230904088-Preventing-circumvention-of-Cisco-Umbrella-with-firewall-rules ... View more

Excellent solution.  I think this is even superior to the solution you were attempting to do.  🙂 ... View more

We have over 200 AppleTVs in our campus. I disable Bonjour to block AppleTV broadcasting over network. Clients will be able to find the nearby AppleTV via Bluetooth.  ... View more

did you find out what this issue was with this? we are seeing similar problems with certain sites. ... View more

@Finn, were you ever able to figure this out? We are having Windows Update issues now that we activated our Cisco Umbrella SWG. Umbrella is suggesting we use the Local Internet Breakout and use the DNS feature but that has not worked. I added about 6 Microsft Windows Update domains and updates are still not working. Trying to figure out all the different IP addresses used for Microsoft Updates will be nearly impossible. Meraki and Umbrella support haven't been able to figure out what's going on. Thanks.  ... View more

Thank you.  I decided to plan for an outage and run the tasks during an approved maintenance window.  I just didn't want anything lingering afterwards, so the advice is solid..  I also took advice of caution given from @GldenJoe in regards to uplink connectivity and the potential for issues there.  Last thing, I called Meraki support and kept a tech on the line during process in the event an issue did occur.  Tech was good and was able to provide updates on backend activity during the process.  It would also be a good idea to confirm the health of your switches and download port configuration before starting.  All went well, and the entire process took less than 20-30min for two switches.  Thanks again.  Hope this helps someone else! ... View more

Hi ,   https://developer.cisco.com/meraki/api-v1/get-network-wireless-ssids/   Will get the current SSIDs. Like said earlier , there a maximum of 15 ssids starting from index 0 to 14. This 'GET' will get your configured SSIDs , so I would use the next 'unconfigured SSID' ( eg : ID 2 ) if ['0','1'] are in use.   Good luck ! ... View more

It is taking a lot of troubleshooting and is not a straight forward easy to summarise situation but hopefully what I have included helps if this issue comes up again. It's come down to a support ticket with Cisco Meraki looking at the routing between two meraki devices mentions and the primary and secondary routes. ... View more