I must say that was a very very pleasant surprise when I logged on this morning, its really good to know that this forum is taken notice of.  I have reached out to Han as David recommended on the other issues around being able to specify which sensors (defaults to ALL), and the visibility of the 'Download' button. Thanks again! ... View more

Just put the url you want to forward them here https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Customizing_the_Splash_Page#Splash_Behavior_-_Frequency_and_URL_Redirect ... View more

Open a support case. ... View more

Hi Philip, thanks for your reply, may I know what is the reason for not using SMS? ... View more

>The interesting thing is this that this only occurs on eap-tls   Perhaps they haven't been configured to trust the root CA certficate. Perhaps they require a minimum of a SHA2 signed root CA certificate and it is only SHA1 signed.   >what message would be sent after a radius accept message  as I would expect that to be final message   Hard to say.  Could be COA.  Could be an additional or secondary challenge.  Need to check client log to see what it is saying. ... View more

The API can be used to see clients' MACID with an OUI lookup you can determine the device manufacturer. Along with traffic the client is generating could be a way to determine streaming devices.    I've also found in the past that splash pages generally cause issues with streaming devices even click-throughs. Since they don't reliably look for splash pages they will fail to authenticate without intervention from administration on the network or using a built-in browser. It's been a few years since I ran public access networks so it may have changed with the latest generations.  ... View more

I also doubt this is an MX issue ...   But let's try and break the problem down further.  Perhaps next Monday, can you plug the MX circuit directly into the primary MX (this will obviously mean your warm spare is not working).  This will bypass your switch, and a couple fo connections. If the issue still happens, you know it is directly related to the ISP and primary MX (since everything else was not plugged in).   Does the uplink graph in the dashboard show any big traffic flows at this time (perhaps someone is doing a big upload/download).   This is the list of things monitored on the uplink: https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Connection_Monitoring_for_WAN_Failover#Failover_Connectivity_Tests  Ask Meraki support to confirm which event is causing the failover.  Perhaps it is the link going down.  Perhaps the link is staying up, but the tests are failing. ... View more

Can you provide clearer information?   Knowing what you have in your infrastructure is not enough. Provide us configuration and topology details.   As previously reported.   just configure the switch port where the Linksys is as the access mode in the desired VLAN and the rest is configuration on the Linksys.   If you are trying to mesh between the two APs this will not work, in other words you cannot bridge Meraki and non-Meraki APs.   If you are configuring with the same SSID name, disable Air Marshal or configure a different SSID name. ... View more

Same here ... View more

Just like any firewall, you must place the most specific rules at the top, that is, you must create rules allowing everything you want and at the end you create a deny any any rule.   https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Using_Layer_3_Firewall_Rules   I also suggest that you carry out all tests in an homologation environment before applying it to the production environment. ... View more

Ok, they're both capable of 10Gbps. Sounds like it could be an issue with the fiber then. I would do a loop back test on both sides to rule out the switches and SFP's  ... View more

For local certificate authenticate, you upload a root CA certificate.  The MR will alow anything to authenticate that uses a certificate from that root CA certificate.   It doesn't matter if it is a user or a machine. ... View more

>If understand correctly I will need an separate VNET for the vMXs,   A separate subnet is sufficient.   >a virtual Firewall (here I'm assuming it will be a Azure virtual FW)   I haven't seen anyone else Azure Firewall for this.  Everyone uses network security grounds.   Is your Azure spread across multiple regions?  Another simple option is to just put one (or two) VMXs into each region. ... View more

There is nothing we can do for you, please try contacting the seller again.   If this is not possible, I regret to inform you that you lost your money. ... View more

Thanks for the feedback ... View more

I think you should raise a case with Meraki Suppport, if you didn't already. ... View more

AnyConnect does not include MFA, but you are not required to use Duo, you can pick any SAML vendor your want.   Almost all our clients have integrated AnyConnect with Azure AD/Office 365 and just use the MFA included in Azure AD conditional access   https://documentation.meraki.com/MX/Client_VPN/AnyConnect_on_the_MX_Appliance/AnyConnect_Azure_AD_SAML_Configuration ... View more

Hi . @cmr  I restarted each switch, and I can now see the topology.They are are up I'm wondering if it would be sufficient to prioritize only the two cores, or if the others would also need to be prioritized. If not, the remainder of the switch would be set to default. really?       for other hand . I a getting error any idea           ... View more

Correct, I was already able to confirm it However, for stange reason, in order to update the users I must use click through I cant find a way to update the user authorization without being a meraki authrozed user or using clicktorugh   The button exist on the UI, I see no reason to allow this action via API ... View more

I think the documentation makes fine sense for adding licenses, but the renew part could use a little "work" with a specific example not just involving the same device type (in the example on that page its just APs).   And I agree, you could actually use the license calculator for this, its just .... ehh ... not that friendly to use, especially if you have many licenses and times to take into account . A really nice feature request here would be to be able to use the license calculator on an already existing org (with the current licenses already put into it). - That would be awesome 🙂     ... View more

I agree with @alemabrahao and keep it simple. Put APs in a mgmt subnet. Drop clients in another subnet(s). A /22 isn't unreasonable for wireless networks. And with our APs you can use L3 firewall rules to stop some of the noise if you want (example, deny netbios and other unnecessary and chatty protocols).    Not sure how many SSIDs you intend to have, but fewer is always the aim. As for the clients joining APs on other floors. There's nothing inherently wrong or bad about that. As @alemabrahao said roaming is a client decision and if a client can obtain a usable signal from another floor AP so be it. ... View more

Good question my friend. ... View more

Have you looked into this article?   https://apicli.com/2021/12/13/meraki-mr-802-1x-with-azure-active-directory/ This solution relies on Microsoft Azure’s SLA (99.99%) due to the caveats above. In addition, the solution requires a secure connection so that the MR can reach Azure AD DS by its private IP addresses. Although Azure AD DS allows LDAPS over the internet, it only allows port 636 and not 389. ... View more