BATMAN is a variation of mesh (802.11s), I don't understand why you want to use that if what you are asking is supported by Meraki?   Why don't you just take a test? Or better yet, consult a Meraki sales representative, he will certainly be able to help you. ... View more

Yes, yes and thrice yes.  I totally support your MS235 idea @PhilipDAth  ... View more

Tell your ISP you can not use a /32.  You need a minimum of a /29.   Ideally, have them present the /28 directly and life will be simple.   Note it is not compulsory to use a VIP. ... View more

Make sure each Meraki site makes a non-Meraki tunnel towards the non Meraki network. As alemabrahao already mentioned, you cannot include SD-WAN remote subnets in a non-Meraki VPN.  It can only route client VPN, local subnets and static route subnets. ... View more

Yeah, I saw that. This is hotspot 2 not the same as the regular hotspot, not all devices support hotspot 2 connections. For example for Android devices - only starting Android 11 with special HW, the same with Apple, only devices from last 5-6 years. And this is a problem, because we are trying to cover 99.9% of devices. Unfortunately the closes implementation of the regular hotspot is what Meraki calling - Sign-on with Radius, which has very limited functionality. But anyway, thanks for trying to help and direct me, but looks like not all problems possible to resolve in a easy way 🙂 ... View more

Thank you so much!  This is exactly what I needed.  My mistake - it seems that I was only looking at the information in the wireless section where the splash page was already set (stupid mistake).  Thank you again for all of your help 🙂  ... View more

Yes, before posting this topic in the community, I filed a support case. There is still no solution to the problem. I'm waiting for a response from the Meraki product team. ... View more

>Hi, how do I completely overwrite a port, without having future changes on the template take effect on that port   You can't.  Updates to the template config will always take priority. ... View more

The new 17.10.9 patch might fix this for you:   New MX 17.10.9 stable firmware release - IDS/IPS CPU utilization fix! (and ... - The Meraki Community ... View more

Thanks for sharing this solution! I ran into this problem too, when I was trying to set up my Meraki network. I didn't know what to do until I saw your post. You helped me a lot! ... View more

This is the documentation for using COA with MR. https://documentation.meraki.com/MR/Encryption_and_Authentication/Change_of_Authorization_with_RADIUS_(CoA)_on_MR_Access_Points  ... View more

Thanks for the help, this is a start. ... View more

Sorry, I cannot provide more details about why it is so important for us to send custom value in that or any other filed that appears in Accounting as well, as it will disclose our private architecture info.  But just trust my word - it is important for us, And probably this is why other vendors have implemented such customization as they also agree that this is important. ... View more

Yep.     RADIUS Accounting with a Sign-On Splash Page RADIUS accounting can be used with RADIUS authenticated splash pages to provide information regarding when a client was authorized through the splash page and later had that authorization cleared/expired. These messages are sent from the dashboard to the customer's configured RADIUS server. Note: RADIUS accounting is only available by default with 802.1X authentication. To enable RADIUS accounting for splash pages as well, please contact Cisco Meraki support. RADIUS accounting is not currently available on splash pages for security appliances or teleworker gateways. ... View more

You can use MaxMind to determine location: https://www.maxmind.com/en/geoip-demo   This is what Meraki uses, I did get confirmation that it will be corrected to USA on their next update cycle next Tuesday ... View more

La función de un cortafuegos no es bloquear el correo electrónico no deseado. Para eso necesitas un antispam.   https://www.ironportstore.com/Anti-Spam.asp ... View more

As I said on the another topic.   When a group policy is applied to a VLAN, that policy becomes the new "network default" for any other group policies applied to clients in that VLAN. Since this policy is the new "network default," the client devices will still show a "normal" policy applied under Network-wide > Monitor > Clients. For example, a group policy named "Guest Network" with more restrictive layer 3 firewall rules than the network-wide configuration is applied to the guest VLAN, and a second group policy "Low Bandwidth" has a custom bandwidth limit, but is set to Use network firewall & shaping rules. If the Low Bandwidth group policy is applied to a client on the guest VLAN, the client will use the layer 3 firewall rules configured on the Guest Network group policy, not the network-wide layer 3 firewall rules configured on the Security & SD-WAN > Configure > Firewall page.   https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Creating_and_Applying... ... View more

Just to remember.   When a group policy is applied to a VLAN, that policy becomes the new "network default" for any other group policies applied to clients in that VLAN. Since this policy is the new "network default," the client devices will still show a "normal" policy applied under Network-wide > Monitor > Clients.   For example, a group policy named "Guest Network" with more restrictive layer 3 firewall rules than the network-wide configuration is applied to the guest VLAN, and a second group policy "Low Bandwidth" has a custom bandwidth limit, but is set to Use network firewall & shaping rules. If the Low Bandwidth group policy is applied to a client on the guest VLAN, the client will use the layer 3 firewall rules configured on the Guest Network group policy, not the network-wide layer 3 firewall rules configured on the Security & SD-WAN > Configure > Firewall page.       https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Creating_and_Applying... ... View more

So, with your recommendation do those users not tend to move around utilize one specific PC all the time? How do you compensate a user moving around with Group Policies that have to be applied at a VLAN or Client level and not able to restrict specifically by the user? ... View more

Any resolution. I am having the exact same issue. I can ping, It fails the same exact way. ... View more

1.- Si quieres renovar 12, solo renueva eso. Quita 3 equipos que ya no usan de la "network" donde se encuentran, y así no cuentan versus el límite de licencias requeridas.   2.- Quitar de la "network" el equipo dañado, y metes a la "network" el equipo que ahora quieres usar.   Tener dispositivos en el inventario no te pide licencias. Solo cuando están en un "network" es cuando cuentan. ... View more

I also know with Windows devices, it's always best to make sure you have the latest drivers for the WiFi NICs. Those have fixed many issues I've had with Windows devices not behaving as expected when connecting. ... View more