That would be your issue. The Meraki dashboard logs into the device via Netcong (over SSH) to pull data.   What does your running config look like? Did you have existing config on the switch before integrating it with the dashboard? What privilege is the Meraki user account configured for on the switch? Do you have ACL's set up for SSH? ... View more

Assuming you have an SD-WAN Plus license, you should be able to setup SD-WAN policies to direct Site-To-Site VPN and Internet traffic to the respective uplinks. ... View more

Sounds like a couple of issues going on there which may have a deeper underlying problem - especially if data isn't pulling into the dashboard. I'd reach out to support on this as they'd be able to get a clearer idea of what is going on.   ... View more

From the above output, the clear majority of network traffic from that client is SMB file sharing. If that's an unexpected usage amount, you'll have to get a clearer idea of what they're pulling down from the file server and why. To prevent it, you could look at applying group policies and setting bandwidth limits via a traffic shaping policy. ... View more

How many AP's are you seeing this issue on? And what version are they running?   Are they all connected to a Meraki switch and powered via PoE or do you have PoE injectors? ... View more

AS @PhilipDAth wrote, if you're using MS Active Directory for employee identity management, NPS is fairly easy to get going and is free. It's not the most pretty or featureful but it does the job.   As for guests, it depends on the user experience and the process you want to implement. Are guests onboarded temporarily into AD? Does someone have to approve their access (Eg. Sponsored guest)? Or do you simply want a click through portal (in which case the Meraki basic splash, or a third party solution such as SplashAccess might help). ... View more

+1 for Bitwarden   I've been using Bitwarden for a few years now and it's a very good password manager. Haven't tried out the secrets manager yet but it looks pretty good from what I've seen. ... View more

Good question but no, there's no way to customise the login page. ... View more

Similar to @PhilipDAth, I also don't know the answer but I think you're right. CoA would require the RADIUS server sending a request to the AP which isn't really possible without an inbound NAT or proxy. I initially thought you could look at using the Meraki RADIUS proxy but it doesn't support CoA. ... View more

Is that correct?   I've never tested but I always assumed that for group policies applied to a VLAN, the bandwidth limit is just applied to each client in that VLAN, not split between the clients.   I can't find any official doc that explains the expected behaviour, only blogs posts and Reddit articles which have people in both camps 😅 ... View more

Not going to lie, that's a weird setup having an MX65 in front of an ASR1K. That said, there's no reason it shouldn't work.   Looking purely at the LAN side, what you've written above should be fine provided the MX65 LAN port connecting to the ASR is configured as an access port with VLAN 801. ... View more

I'm with @cmr  . In an enterprise environment, while Jumbo frames locally for storage makes sense, pumping them over a WAN often doesn't purely due to the increased network complexity and risk factors. ... View more

It is a per-client bandwidth limit       Creating and Applying Group Policies - Cisco Meraki   ... View more

Looks like a pretty close alignment to the 18.107.4 release notes. Now to decide which version to upgrade to... 😅 ... View more

A big happy birthday to the Meraki Community and a big congratulations to @AmyReyes and the team who have been doing a great job running it for 6 years!   ... View more

Not at all, that's what the community is here for. We've all taken over undocumented networks in our time.   I think I now understand - The university is providing a 'direct' patched fiber connection to the new building. It doesn't run through any of their switches. In that case, it's easy. If you're only using VLAN 1, you just make sure the port connecting to the new switch is configured as a trunk allowing VLAN 1 and plug everything in. As a side note, using VLAN 1 is typically seen as a poor design. In future you may want to look at creating other VLAN's and segmenting traffic. ... View more

I have a network with exactly this setup - 2 sets of 2xC9500-48Y4C with Meraki monitoring. I've had very rare intermittent issues with monitoring alarms and incorrect warnings on the dashboard but nothing that has stuck around long enough to be worth troubleshooting.   I'd just suggest confirming:  - Your upstream router has the correct firewall ruleset mapped to the IP address the Catalysts are for the Meraki connection. Double check the destination/ports against what is listed in the dashboard (help -> firewall info)  - SSL inspection is disabled on the upstream firewall. ... View more

Correct, a 10GB LR transceiver will match the fiber you've described. You can also use any of the other SMF options listed in the following link (assuming your switch supported it). SFP and Stacking Accessories - Cisco Meraki   It sounds like a fairly simple topology - just make sure your VLANs are trunked in all the right places.   If I'm understanding you correctly in that your network is logically separate from the University campus network but is transiting across it, you might want to consider placing an L3 switch in the new building. You can then place the clients there on a separate L3 network and use a transit VLAN to connect between the new building and your existing network (through the university switches).   If that's not correct and you are a part of the university campus network, it's still a good practice to split the L3, but you could also just trunk your L2 VLAN's to the new building switch.   ... View more

So with the config there, you're applying configuration based on AP tags. Are you using tags on your access points? If not, the "Default" tag applies to all AP's. Otherwise if you are, you can assign the vlan to the ssid based on AP tag as you have there.  ... View more

You need to be vlan tagging on the SSID.   In the 2nd screenshot, you have "don't use vlan tagging", which means that clients aren't being assigned a vlan based on the SSID. They will instead just get out onto the native vlan. ... View more

It's difficult to get an idea of your exact configuration from above but typically you would want to do a trunk port between MX and MR, allowing all of the vlans of your ssid's. The native vlan should be either an unused vlan or the MR management vlan (depending on if you've manually tagged the management vlan on the MR's or not). Finally, your ssid configuration should do the actual vlan tagging.   Can you give us some screenshots of the port config on the MX and the ssid config on the MR? ... View more

A list of the types of data kept in the Meraki cloud can be found at the following link   https://documentation.meraki.com/General_Administration/Privacy_and_Security/Cloud_Data_Retention_Policies#User_Traffic ... View more