Hi Aman, This shall not be possible with MX64. You may achieve this with help of Cisco ISE / Radius Server integration. ... View more

Hi Chris I may be completely wrong. 4G connectivity is ideal for Cloud Management I do not see them as an alternate for MPLS.   However if we can have public static ip and desired ports open on 4G service we may configure site to site vpn with a Non Meraki peer.   Note : I have never tried this configuration though.  Lets wait for more inputs from community members.     ... View more

Hi,   On boarding 2 ISPs on MX 250 shall not be a challenge. All models of Meraki MXes support 2 WANs. This can be configured from Local Status Page of the Hardware ( Connecting a PC to Management Port). I am sure you know about this.   Now segregating WANs each for 2 different organization. One idea shall be to take the advantage of “Traffic Shaping” Feature [Security Appliance->Traffic Shaping]. You may create 2 different subnets on MX250 and with the help of Internet Flow Preferences can route the Traffic to desired WAN. You may configure L3 Firewall rule to deny any communication between the subnets [Security Appliance->Firewall].   However I believe if one the Link fails all the traffic shall move on to the active link.   ... View more

Hi I believe as of now only possibility is to have  unlimited or single login.   Is there a way to limit number of logins on AD? May be of some help here.       ... View more

Hi  I believe as of now only URL logging is possible.   https://documentation.meraki.com/zGeneral_Administration/Monitoring_and_Reporting/Syslog_Server_Overview_and_Configuration   ... View more

Hi, I believe as of now "Hostname" is not supported. We need to configure IP Address in the  Radius Server field.   However I suggest an input from @PhilipDAth I could be wrong too.   ... View more

Hi Jorge, Agreed to @PhilipDAth. I too do not see any challenges with the proposed topology.   I hope you have already referred the following Url https://documentation.meraki.com/MX/Other_Topics/Warm_Spare   ... View more

Hi, If this is to reboot Meraki APs?   One idea is to cycle Multiple Ports on the switch (If  you are using Meraki POE Switches.). However the feature is interesting and you may put a request on "Make a Wish" section from the Dashaboard. ... View more

Hi Kegan,   This is my understanding. Basically this feature enables "SSID-wide single VLAN tagging" / "Per-AP multiple VLAN tagging". An ideal scenario could be as the document suggests to assign different VLANs to devices on the basis of their location. However SSID remains same. Yes, when we enable this feature we also need to specify a default VLAN for rest of the APs.   To throw untagged traffic I believe we need to disable this feature. ... View more

Hi, Ideally you should consider MX84 for 160 devices. I believe you may observe slowness / degraded performance on your network while using MX64-68 for such a kind of load.   You may refer to MX sizing guide (on Page 4 & 5) for more information https://meraki.cisco.com/lib/pdf/meraki_whitepaper_mx_sizing_guide.pdf   Following are the excerpts from the above Sizing Guide.   Although there is no hard limit on the number of client devices that can be deployed below MX Security Appliances, for purposes of this document all tests were performed with the client counts shown in the table below. Exceeding these client counts may result in performance that varies from the sizing data contained in this guide.   UTM products come with a variety of security and networking features. Understanding the benefits and tradeoffs of these features is crucial to getting the maximum security benefit without unnecessary performance degradation.     ... View more

Hi Unni, This is my understanding. MXes in HA works in Active-Passive mode. We need a single License for this functionality. This means at a given time only 1 MX shall be in service. All the traffic needs to flow via the active MX. The traffic flow may utilize both the Links (ISPs) using Load balancing and Internet Flow feature. If you have SD-WAN you have further options to segregate traffic.   Failure of MX / ISPs shall swap the roles (Primary / Spare) of devices.   ... View more

Perfect.  ... View more

Hi @FelixJacomino   Given an opportunity you must not miss the visit Meraki HQ.   During my Masters session I was lucky enough to spend a week there. Amazing Environment - Great Culture - Wonderful People.   Also If "museum" is the right word. There is a section where in, we have all the products of Meraki in display since inception. ... View more

Congratulations Philip. ... View more

Hi That seems to be correct. Few of my clients recieved email from Meraki on this.    Screenshot attached for reference. ... View more

Hi Samir   Following is my understanding on OD2s.   https://meraki.cisco.com/lib/pdf/eol/meraki_eol_od2.pdf   Excerpts from the above Url says OD2s • End-of-Sales Announcement: July 26th, 2012 • End-of-Sales Date: October 30th, 2012 • End-of-Support Date: October 30th, 2017   I understand you may be able to use OD2s without License if you have not upgraded your Pro Dashboard to Enterprise Dashboard. Also Pro Dashboard is not available any more.    If you create a new Dashboard that shall be Enterprise and one needs to purchase License to use the Access Points. Having said that I shall recommend reaching Cisco Meraki Support for better understanding.     ... View more

Hi Franck, I understand the physical IP shall remain in MX unless we Reset or Update from the Dashboard. To move a MX we need to remove it from one network then add to another. In the process of removal do we loose the physical IP? That's is a question.   https://documentation.meraki.com/zGeneral_Administration/Inventory_and_Devices/Moving_Devices_Between_Networks   Excerpts from above Url. MX Security Appliances Since a Security Appliance only contains one MX device (or two identical devices in a warm spare configuration), there is rarely a need to move an MX from one network to another. As such there is no dedicated move tool. To move an MX security appliance between networks, it can be manually removed from one network and added into another. Please refer to our documentation for more information. ... View more

Hi   This seems to be strange. Can you verify that the policy is effecting the specified client? (Network-wide->Clients) Also match the physical MAC address of device with the MAC address detected on the dashboard.     ... View more

Hi Warren I am not very sure. I believe the event logs shall capture this information. ... View more

Hi Warren As you said one option is to block at the server level itself https://social.technet.microsoft.com/Forums/lync/en-US/d3a2694c-32da-4158-943a-81c2904ffb3d/disable-automatic-updates-in-2016?forum=WinServerPreview In case you want to do this at MX Level. I have the following suggestion. You may create a Group Policy (Network-wide->Group Policies) and apply the policy on the desired servers (Network-wide->Clients). You may also create a schedule to apply the policy.    In the Group Policy you may consider creating rules for 1. L7 Firewall -> Deny Software Updates 2. Blocked website categories->     Business and Economy     Computer and Internet Info   OR Blocked Url patterns->     windowsupdate.microsoft.com     *.windowsupdate.microsoft.com     *.update.microsoft.com     *.windowsupdate.com     download.windowsupdate.com     download.microsoft.com     *.download.windowsupdate.com     wustat.windows.com     ntservicepack.microsoft.com     *.mp.microsoft.com   For complete information please check the following Url https://documentation.meraki.com/MR/Group_Policies_and_Blacklisting/Creating_and_Applying_Group_Policies   Hope this helps. ... View more

Hi Jay This seems to be challanging. Incase your issue is not solved yet. How about trying following options again?   1 Try to keep the reset button pressed for 30 seconds. 2 Instead of POE switch use a POE injector to power up the AP. Make sure you do not connect LAN into Injector.   Incase you still do not see the "Meraki Scanning" SSID.   Last resort I  shall try is to connect AP to DHCP enabled LAN with OPEN internet. Many times I have used my Laptop along with USB datacard to create this environment enabling internet sharing feature on Windows OS.       ... View more