Hi,   We have offices in London, Hong Kong and Shanghai and definitely have issues with our MX64W in Shanghai.    I see registry issues with the VPN, sometimes it drops the connection, other times it stays up and the registry issue resolves itself. When the VPN drops for more than 5 minutes we usually reboot the appliance, which forces it to use another random port which seems to work.  IIRC this was the advice of the Meraki Support rep. We live with this.   Out SH office is just a room in a managed service building, so we have no control over the internet connection or ISP provided to that office. It's literally just a cable hanging out the wall. I have no idea what upstream devices are being used, how the bandwidth is managed, whether any shaping is going on, etc. I have suspected this setup could be part of the issue, but we don't have another mainland Chinese office to test from.     The VPN between HK and London is rock solid. ... View more

I like the user guide of how to find things.  this is usually where I waste a lot o time on these kind of boards.  Keep the info coming!! ... View more

+1 to keeping this Meraki specific.  ... View more

Hi Tony I have some mobile applications for the Z3. If we do not use the Poe capability, what specification power supply can we use? Thanks ... View more

Awesome glad you worked it out!  ... View more

You could attempt to create a specific VLAN for guest users off the firewall and obviously control what they can talk to within your network from the firewall itself using firewall rules. That way you gain full visibility of Guest clients at the firewall.   Never the less, visibility of guest clients can be seen from the Mearki dashboard. IMO if you can implement security closer to the edge of the network the better. I'd stick with your Meraki Guest NAT SSID.  ... View more

I would recommend putting it in 802.1q trunk mode and allow your management VLAN and production VLAN over the trunk (I typically allow all VLANs across the trunk and only allow access using the VLAN tagging option on the SSID; this comes in really handy if you want to assign a group policy to a device to put them in a different VLAN when connected to the same SSID).   On your 4948 you can configure the port with switchport trunk native vlan (ManagementVLAN), and then make sure you do not tag the VLAN on the AP configuration page (Wireless > Access Points > Click on the AP > LAN IP (edit button)). You will also want to make sure that you use VLAN tagging (Wireless > Access Control)  to ensure that your users are going to be in the prod VLAN.   -- CMNA Certified ... View more

Thank you so much Wankiller   Much appreciated. ... View more

+1 to this question - Time to get even more creepy! ... View more

I don't see why the Splash page for the MX would be any different from the AP's. I'd assume they'd still be using the same API. ... View more

Thanks @MerakiDave. I'll reach out to our SE to ask about being apart of the Beta analtics programme.   ... View more

We are having the same issues. Been working with support for weeks now and still nos resolve. We have an MX100 firewall and it randomly will not apply the group policies that we set in Meraki that integrates with active directory. I can sign into 3 machines with my username and 2 out of the 3 machines will block access to certain sites. Basically it is applying the default policy to my account on two out of three machines. Big problem when you are the Admin and cant get to resources you need. This is also a problem due to the fact that a default user that needs restricted access to certain sites now have full access at random. When looking at the MX100 you will see the IP address doesn't match up with the logged in user. I see other users getting my policy that shouldn't.  This is a HUGE security flaw that needs to be addressed and right now with it coming up top three weeks of an issue. The only TEMPORARY fix is to white-list the IP address but if it doesn't have a static IP then someone else will get a white-listed IP that shouldn't when they get a DHCP release.  Not sure if this is just me but i feel like Meraki is dragging their feet on this.   ... View more

@Mr_IT_Guy LOL!!! AMAZING!!!   Perhaps you should change your name to Friar_IT_Guy...    ... View more

I don't think there is anyway around this unfortunately. If Meraki support have told you already that their isn't an NFO (Network Feature Override) that they can apply to help overcome this I'd say that this feature is not yet available/supported.   My recommendation would be to follow up the feature request with your SE/Sales rep they'll be able to work with you on this specific feature request as well as getting directly in touch with the Product managers themselves. ... View more

There is 600 Sites.  I can't double the routing table by adding a management subnet.    There is already going to be a heap of automation and scripting.  In the end, all a person will do is put in the ADP Site code and serial numbers, and everything else will be automated.    Scripts will create the network using the ADP Code, name the devices, reach out to IPAM to find subnet located with ADP Code and configure the devices for the LAN IP info.  It will also reach out to TEMS to get WAN IP address info and try to apply it to the device. From there, it will also reach out to ISE to add the devices that are needed.  We are going to be adding cameras, so I will need to add them to ISE as well for MAB.   We will have 12 months to get this all done for 600+ sites.  I will have entry level provisioning engineers doing most of the work, and by the end of Q1, I will have to shift back to DC work with firewalls while the other guys continue running with this.  ... View more

Thanks for this suggestion, and you'll be pleased to know there is a feature request in the system already for this ability.  It is a good/valid request and you can expect it to come in time, but ETA is unknown.  The best suggestion is to keep making the wishes (best to make the wish while you're actually on the packet capture page in Dashboard so it gets properly categorized) and keep the feedback coming through your Meraki or Meraki Partner sales teams so they can also help prioritize.   ... View more

Thank @barryf2031 for noting this, Meraki does value all feedback both positive and negative and your objection is noted.  A great deal of thought is poured into all Meraki hardware design, and Meraki is fully aware the MV physical installation is a critical element to both a customer's overall experience and the capabilities of the video surveillance solution.  For example, bonding the MV21 dome and camera mounting plate into a single unit along with a hand-removable bubble for optical adjustments, right down to the way the foam tray holds the tools and screws and even optimizing the size/shape of the installation guide for use on a ladder.  With additional feedback and Dashboard wishes, Meraki can take that many more data points into consideration for future iterations of the hardware, so thanks for sharing and thanks for joining the Meraki Community.   ... View more

I'd recommend also opening a support case to get to the bottom of this issue; It could be related to a known bug. As a workaround you could attempt to exclude DFS channels from the auto-channel assignment if you haven't already done this? - https://documentation.meraki.com/MR/Radio_Settings/Dynamic_Frequency_Selection_(DFS) ... View more

Nice incentive to keep active! I'm going to try and be more active from now on, had a very busy schedule the past few weeks! ... View more

From the dashboard go "Help/API Docs" in the top right hand corner. ... View more

So basically forget the OTV reverse the position of the Switches. The Meraki MS would be a the network border and the 7700 would be the core switch. So it's kind of like a leaf and spine configuration. Except the leaf is the MS at the network edge and the spine is a 7700 series? ... View more

i have deployed 2 units of Linksys LAPN600 and 1 unit of LAPN1200 AP on the meraki switch. in my old setup i have antslab authenticating clients connecting to meraki AP. antslab will provide guests with access code to use the WIFI. for the 3 new Linksys AP, i actually do not need guests to authenticate with the antslab gateway. i just need a single SSID on the 3 linksys AP for guests to access WIFI Internet.   can this work ? ... View more

On the web page Syslog Server Overview and Configuration, in the exemple the devices are on the same subnet ( https://documentation.meraki.com/zGeneral_Administration/Monitoring_and_Reporting/Syslog_Server_Overview_and_Configuration)     ... View more

I'd stay away from splunk. If you're looking to archive event data and take advantage of big data, data correlation and data warehousing with a true cloud solution (like Meraki) have a look at https://www.sumologic.com/. ... View more