Hi @SamanthaLu  Welcome to the Community. Certainly Meraki is an "Awesome" solution. Let us know if we can offer you any "Guidance". Have a great day ahead.     ... View more

Hi @route_map  I understand this will hard to give an estimate on coverage. The Meraki documentation talks about 100 meter in general.   Hope you have referred the following documents. https://documentation.meraki.com/MR/WiFi_Basics_and_Best_Practices/Access_point_range_and_signal_strength_maximization   https://documentation.meraki.com/MR/Other_Topics/MR_Access_Point_FAQ ... View more

Hi @Patrick777  I understand "No". They are seems to be dedicated for Internet Links.     ... View more

Hi @Aamir  I believe the understanding is We can have a FULL Tunnel / SPLIT Tunnel. [We may send All / only the Remote Subnet Traffic via the Tunnel] Tunneling There are two tunneling modes available for MX-Z appliances configured as a Spoke: Split tunnel (no default route): Send only site-to-site traffic, meaning that if a subnet is at a remote site, the traffic destined for that subnet is sent over the VPN. However, if traffic is destined for a network that is not in the VPN mesh (for example, traffic going to a public web service such as www.google.com), the traffic is not sent over the VPN. Instead this traffic is routed using another available route, most commonly being sent directly to the Internet from the local MX device. Split tunneling allows for the configuration of multiple hubs. Full tunnel (default route): The configured Exit hub(s) advertise a default route over Auto VPN to the spoke MX. Traffic destined for subnets that are not reachable through other routes will be sent over VPN to the Exit hub(s). Exit hubs' default routes will be prioritized in descending order.     ... View more

Hi @guzgerardo  Is it possible for you to connect a PC directly to MX and Test?   ... View more

Hi @cgibson777  "switch taking care of the Vlan routing/tagging and the firewall just doing internet traffic is perfect, I just can't seem to get it right." If I understand you right. The requirement is 1. All the VLANs shall reside on the switch 2. MX shall be the gateway for internet access   Possible configuration could be On MX 1. Create a Transit VLAN Security & SD-WAN > Addressing & VLANs > Routing       2. Create reverse route for VLANS on the switch Security & SD-WAN > Addressing & VLANs > Static routes On Switch 1. Create a Transit VLAN Switch > Routing & DHCP   2. Create Default Route towards MX Switch > Routing & DHCP           ... View more

Hi @guzgerardo  I understand if AD Integration is successful with Dashboard. We can MAP the AD Groups with Respective Meraki Group Policy and this shall work.   Kindly refer the following image for more information.     ... View more

Hi @petermlamont  My understanding is Internet will terminate on WAN1 and SIP MPLS will terminate on LAN Port (You will create a VLAN on MX). ... View more

Hi @petermlamont  Certainly MX68 can accommodate 2 external WAN links simultaneously. Yep, The links can work as fail over / load balancing. Also we can define rules to send traffic of specific source (IP Address) to exit via a select Link (WAN1 / WAN2).   Is this the answer to your question? I am not sure.     ... View more

Hi @Slider    I understand MDM Sentry Policies Feature may help here. https://documentation.meraki.com/SM/Other_Topics/Configuring_Sentry_Policies ... View more

Hi @petermlamont    Lets terminate internet link [I believe you are already done with the below configuration however just in case you need any additional information] To terminate the internet link on the Internet 1 port of Meraki MX68   You may read the following Url https://documentation.meraki.com/MX/Installation_Guides/MX67%2F%2FMX68_Installation_Guide#Configuring_Physical_Link_Settings   This shall bring the device live (connected to Meraki Cloud). Here after we need to do all the configuration via the web portal (dashboard,meraki.com).   Route SIP Lines [I may not be correct here. @PhilipDAth advice solicited] Create  VLANs for SIP MPLS and Internal LAN  Security & SDWAN > Addressing & VLANs > Routing   Port forwarding to Internal PBX Security & SDWAN > Firewall > Forwarding rules       ... View more

"Onsite" an engineer will visit you to assist in installation 🙂 ... View more

Hi @Mohammad    SKU starts with CON-ROB-XXXX (XXXX Depends on the Product etc.). There is a list available in CCW. Ideally you must reach your preferred reseller to get complete details.   I believe Middle East too covered under this program.   Also there are 2 kinds of Service Tiers available 1. Meraki Now 2. Meraki Now Onsite    Also you may consider @PhilipDAth advice too.     ... View more

Congratulations Friends!! ... View more

Hi @Mohammad  You are right. The support for Meraki Products are included in the Licenses. However Meraki also offers (Optional) time bound RMA support for Critical Operations.   You may find more information in the following file. https://meraki.cisco.com/lib/pdf/meraki_now_solution_guide.pdf       ... View more

Hi @Ragu  I understand if we Choose Meraki Authentication. The available option is Single / Multiple Device logins at a time. We cannot choose the "Quantity".       ... View more

Hi @rahirahisystems  I believe The understanding is all the traffic  will be sent to Default  Route if not filtered by any other Routing Protocol.   ... View more

Congratulations friends. Thank you all for the Kudos and Helping me to reach this stage. Wish you all a very prosperous 2020. Regards Ajit ... View more

Hi @RangerZ    The following document contains good information about Meraki Air Marshal (WIPS/WIDS). Do check this if already not. https://meraki.cisco.com/lib/pdf/meraki_datasheet_airmarshal.pdf Most of your concerns can be addressed by MR33. I understand MR33 shall be a better investment in comparison to MR20. ... View more

Hi @esteban01  As @SoCalRacer suggests, In case we want to use both the links I believe "Load Balancing" features helps. The traffic is distributed between the links as per the configuration under "Uplink configuration" at Security & SD-WAN > SD-WAN & traffic shaping.   I understand this way client can utilize both the links. Also the fail-over is automatic, if a link fails all the traffic will flow from the other working link.   ... View more

Hi @etb  I understand the configuration 1 suggested by you shall be the way out. I do not see any other better means except to Deny Inter VLAN communication.   ... View more

I agree with @BrandonS. Possibly this shall solve the issue. ... View more

Hi @John_D  I believe the port # 4 is configured as WAN2. Could you please convert the port to LAN?   Security & SD-WAN > Appliance Status > Uplink                                                       ... View more