Meraki

RWelch · ‎Nov 1 2025

AI Assistant Fun on AUG 6th 😊

RWelch · ‎Oct 31 2025

You can not convert a LAN port to a WAN port (no).

RWelch · ‎Oct 31 2025

You would need to use SFP modules (fiber or copper) are required for physical ports 1 & 2 and port 3 would then not be available for use. Port 4 would be your tertiary WAN.

RWelch · ‎Oct 31 2025

On the MX85, MX95 & MX105 - The Fourth physical port is the designated backup port. Physical ports 1 & 2 become designated WAN 1 and WAN 2 ports. On the MX85, MX95 & MX105 - the Third physical port is disabled and unusable once MultiWAN is enabled MultiWAN Backup Uplink

RWelch · ‎Oct 30 2025

As a suggested best practice once you get back into your account: Note: Dashboard organizations should always have at least two organization admins with full permissions. This is best practice in case one account is locked out or if access to that account's email address is lost. Managing Dashboard Administrators and Permissions

RWelch · ‎Oct 30 2025

Makes sense from that perspective @jimmyt234. Legal action and restart from scratch (unfortunately)....and be very selective to who has full organization admin permissions.

RWelch · ‎Oct 30 2025

If you are worried or concerned about your current MXs longevity, you can always use the Replacing an Existing MX with a Different MX which walks through the process of removing the old MX and replacing it with a different MX - not sure exactly the reason for wanting or needing a backup config.

RWelch · ‎Oct 29 2025

Kudos @JoseV to those who brought dark mode to reality - I like it so far or for those pages I have previewed. The theme icon was present for n583 and will wait for the other shards. 👏 👏 👏 (dark mode) Feature Announcement: Dark mode is here!

RWelch · ‎Oct 27 2025

Looks like they have reverted back some of the changes - no more yellow/red....just took a couple weeks.

RWelch · ‎Oct 27 2025

@rhbirkelund when you change networks are you doing so by selecting other networks at the top of the page? It works fine for me (switching networks) if using the ALL NETWORKS drop down at the top.

RWelch · ‎Oct 23 2025

Here is the Meraki and Starlink Deployment Guide for your consideration. The likely culprit is CG-NAT telling the MX there is a IPv4 conflict even if IPv6 is unaffected.

RWelch · ‎Oct 23 2025

While I am not aware of Ricoh brand printers there are a few considerations or best practices that can apply to most any printer brand: update firmware to current release; if device(s) are end of life remove them from service disable unused service (FTP, Telnet, SNMPv1) change default password Things you can do leveraging Meraki (normally part of the network design phase) use network segmentation (dedicated VLAN for printers / IoT devices) use L3/L7 rules to allow/deny what devices can connect to the dedicated VLAN block internet access to these devices (you might need to temporarily allow access for updates then block internet access once updates are completed). If you happen to have advanced license turn on IDS/IPS and content filtering and look for any activity using security center.

RWelch · ‎Oct 23 2025

The Meraki Co-Termination Licensing Overview indicates: 1-day licenses are only available in per-device licensing and cannot be used in a co-termination organization.

RWelch · ‎Oct 22 2025

Change Fiber Cable Polarity Within 30 Seconds

RWelch · ‎Oct 22 2025

If your infrastructure has the required hardware, you might consider Access Manager. Access Manager Datasheet

RWelch · ‎Oct 22 2025

Welcome @JustinMC - is client balancing enabled? Have you disabled it as part of your testing? Client Balancing

RWelch · ‎Oct 20 2025

Is the desired or selected "AP tag" the exact same in both locations: 1. Wireless > Monitor > Access points Using Tags to Manage MR Access Points and 2. Wireless > Configure > SSID availablilty? Using Tags to Broadcast SSIDs from Specific APs Note: Although tags are case sensitive, it is advised to avoid using multiple capitalization variants and use completely unique tags per use-case. If similar tags are required, a hyphen or number addition should be used such as test1 or tes-t . Are you using bridge/NAT mode? How are the ports configured for the APs? Are the VLANs configured correctly (802.1Q) for these ports? Do you see any event logs? For those APs you have selected an AP tag for, do you see it showing as broadcasting (where the arrow is located below)?

RWelch · ‎Oct 20 2025

Sorry, apparently I misread your post.

RWelch · ‎Oct 20 2025

Moving Networks between Configuration Templates When networks are bound to configuration templates, they will assume the configuration of the template itself. Therefore, when networks need to be moved between configuration templates, they will need to be unbound from one template before being bound to another, as they cannot be moved directly between templates. However, since the network configuration is held on the template, there should not be any risk of losing the network-level configuration if templates are used properly. Best Practices for Merging Networks and Organizations

RWelch · ‎Oct 17 2025

The MX tags traffic, but does not enforce Adaptive Policy rules for traffic between directly connected clients on its own LAN ports. Enforcement is designed for scenarios where the destination is another network device (such as a Meraki switch) that supports Adaptive Policy.

RWelch · ‎Oct 17 2025

What did i miss? The scenario you describe above would likely work IF you had a TrustSec capable switch in the equation and your client devices were connected to the switch ports vs MX itself. As mentioned by @alemabrahao: The MX can tag packets with Security Group Tags (SGTs) for Adaptive Policy, but enforcement is always done at the destination device - not at the MX itself. SGT tagging is only visible and enforced when the destination device supports SGT and Adaptive Policy. If your MX is the only device in the path, it will tag traffic, but there is no enforcement unless another device (like a Meraki switch with Adaptive Policy enabled) is the destination. SGTs are not visible in standard IP packet captures as they are part of Cisco's proprietary CMD encapsulation. In an Adaptive Policy network, the policy is enforced at the destination network device. This creates a highly scalable policy framework as the network device only needs to worry about the tags of the clients that are directly attached to it and not of the IP prefixes. This does however come with some fairly rigid requirements for micro-segmentation including end to end support of the CMD encapsulation. Adaptive Policy Overview

RWelch · ‎Oct 16 2025

Availability: The feature is now GA with a few exclusions. This feature is not available for PDL organizations. Also, this feature is not available for Service Provider organizations since End-of-Life communications are managed directly by service providers.

RWelch · ‎Oct 16 2025

@alemabrahaomight chime in with an option (work around).

RWelch · ‎Oct 16 2025

I am and have used the port forwarding for client devices within the incoming MX for local LAN resources from the WWW but not a relay per se situation. The relay from S1 to S2 would be something I've not attempted.

RWelch · ‎Oct 16 2025

If you were able to leverage S2S AutoVPN (both MXs in the same ORG) it's my belief you wouldn't need any port forwarding in the equation because you could enable the VLAN for the IP you want to share using the S2S AutoVPN. I will refrain from speculating on the port forwarding at S1 for device access on S2. That would be a step outside of my wheelhouse.

About RWelch

RWelch

Community Record

Badges