Meraki

alemabrahao

This document will help you better understand how to use the feature. https://documentation.meraki.com/Platform_Management/Dashboard_Administration/Operate_and_Maintain/How-Tos/Blocking_and_Allowing_Clients

RalphDiaz

Sounds like a firmware and feature interaction issue more than a pure ISP or hardware failure. Running mismatched firmware on MXs in similar roles can absolutely cause weird, time-based behavior. The Wednesday 2 PM pattern is the biggest clue. That lines up suspiciously well with scheduled maintenance tasks, like IDS/IPS or signature updates. The “interface went down” without a reboot usually points to the dataplane restarting, not the whole box. That would drop WAN and LAN briefly and look like a reboot to downstream devices. I’d start by disabling IDS/IPS on both MXs as a test. Also try to get them on the same firmware train if possible. At King Johnnie VIP, users https://kingjohnnie-vip.bet experience online gaming within a polished VIP-style setting.

BlakeRichardson

@Kathy3530 Have you got Wifi settings included in the overall settings you are pushing to the devices?

BT-Training

Thanks a lot for the guidance support!

LeoHernandez

This usually isn’t Meraki suddenly enabling splash. It’s Windows 11 behaving differently during network checks. When Windows thinks a network has limited or uncertain connectivity, it tries to validate internet access with a browser test. If that check doesn’t pass cleanly, it assumes a captive portal exists and throws the action required prompt. With 802.1X, this can happen if authentication is slow, delayed, or briefly fails. Some Windows 11 builds are more aggressive about this than Windows 10. GunsBet Casino provides a balanced online casino guns-bet.casino environment for players seeking ease and variety Timing, drivers, or NAC posture checks can trigger it. Meraki logs it as splash because Windows is probing. It’s more of a client-side detection issue than an SSID misconfiguration.

StevenPPAA

We converted it back to Cataclyst and will use it again as device-managed in Meraki.

alemabrahao

It's not an workaround, it's the design proposed by Meraki.

JameyFischer

The tunnel coming up but RADIUS failing often points to MTU or fragmentation problems. Firmware 18.x did change how some VPN traffic is handled, especially around encapsulation and packet sizing. That could explain why it worked on 14.x and breaks now. The effective MTU may not be the same even if the tunnel shows as up. Since you can’t replace hardware or redesign AD, your options are limited. Waiting for a firmware that allows MTU adjustment sounds like the cleanest path. Blueleo provides a balanced mix of accessibility blueleo-casino.com and online gaming variety. In the meantime, reducing packet size on the AD side, if possible, might help.

ffiol

Sorry, I'm in the wrong place.

PhilipDAth

I wrote a script a long time ago that takes a GPS feed from a Raspberry Pi and uses that to dynamically update the vessel's location. Any networked GPS receiver on board should work. https://ifm.net.nz/cookbooks/meraki-gps.html

PhilipDAth

Could you just update the existing VPNs?

dropped_packetz

Yeah, I found that when I first got on and did a search. I have that page up and the page that is in the link at the bottom of that page and still not seeing the full picture. I'll read through them all and and see if I can pinpoint what I am missing or try to get a better description of the missing puzzle piece I'm not understanding.

alemabrahao

You need to open a support ticket. Only Meraki support can handle this.

GIdenJoe

The prices are a bit lower than ISE session licenses. And I do believe an ISE like environment is running the radius services. They could of course do a little extra effort and provide full blown profiling and perhaps an optional native cloud PKI so you don't need to rely on MS Cloud PKI or SCEPman.

alemabrahao

Blocking only via Zscaler DNS may reduce some QUIC‑related issues, but it will not reliably prevent QUIC. For consistent results, you need to block QUIC at the network/HTTP proxy level, not just DNS.

rhinkamper

Here we are in 2026 on firmware version 17.2.2 and there is still no reboot stack option for the MS250

OliverPerez

Questo di solito indica una mancata corrispondenza della durata di vita della fase 1 o della fase 2. Se i timer di rekey non sono allineati, il tunnel potrebbe interrompersi e non riuscire a rinegoziare. Inizierei controllando la durata di vita di IKE e IPsec su entrambi i lati. Controlla anche le impostazioni DPD e keepalive. A volte, timeout aggressivi causano la disattivazione del tunnel. Caspero Casino ti Casino Caspero offre un’esperienza di gioco completa e coinvolgente. I log su entrambi i dispositivi dovrebbero mostrare cosa succede subito prima dell'interruzione. Se tutto corrisponde, anche le versioni del firmware possono avere un ruolo.

Jay233

Hi All, Amazing response really appreciate your support, thank you!

_Thomas_

The endpoint does not trust the Access Manager certificate which comes from IdenTrust. Read the ReadMe file in the cert download for CN matching restrictions.

zack3

Thanks everyone some good suggestions here. I wasnt aware of the DORI section. Cameras and their placement is a new area for me. I am aware its an outdfoor camera for now due to the cold we are demoing the camera indoors. Im going to try and place it in a school lunchroom area in the middle to see how it works out.

PhilipDAth

Note that Meraki Systems Manager is being turned off. You should not do new deployments using this product. https://documentation.meraki.com/Platform_Management/SM_-_Endpoint_Management/Product_Information/Meraki_Systems_Manager_EOL_Migration

nickbond

For anyone stumbling across this post who uses PowerShell, I've created a similar script based on the good work by MartinLL above. The script is slightly different as it retrieves an existing payload template that you have in the Meraki dashboard and creates a new one based off this that is org-wide. Link to script here.

rhbirkelund

❤️mDNS ❤️

Inderdeep

To start the Certified Meraki Networking Associate (CMNA) certification, you must first verify your eligibility, as it is an exclusive program for pre-sales engineers working for qualified Cisco Meraki partners. Step 1: Check Eligibility & Access Partner Status: Confirm your company is a Cisco Meraki Partner. Partner Portal: Register for an account on the Cisco Meraki Partner Portal. This is where you will find available training dates and locations.

AJAY2

Great! Thank you.

About alemabrahao

alemabrahao

Alessandro Abrahao

Community Record

Badges