@Bovie2K Agreed.   Agreed.   E.g. 1 year for 1 Device > Add 2 Devices > 0.5 Years for 2 devices. And 1 years for 2 devices > Remove 1 Device > 2 Years for 1 Device. ... View more

I used the same SSIDs across all 4 locations...works great! Single splash page is not an issue. ... View more

@soomeGUy yes, we are expecting the MS120 to be quite a bit cheaper than the MS225 because they don't have 10Gb/s connectivity. ... View more

I can't think of anyway to solve this one.  You can do inbound 1:many, but not outbound many:1 NAT. ... View more

@american_nisei wrote: Sweet!!! THIS is very helpful indeed! No problem! Don't L7 block all online backup, as the "iCloud" rule blocks WiFi iMessage. ... View more

With the 2 sticks I tried, the first was not recognised, and the second was recognised (ie the z1 knew what device it was), but just sat at "connecting" without going any further.   I've since given up on the USB port and have now connected the 4G stick via a 3rd party 4G router and into the WAN port.  Not ideal, but as I mainly want it for the 4G connection, this works.  If I was using it in a failover situation, then in theory it should happen that rarely that I would just manually patch it over without it being too much of an issue.   Al. ... View more

do you use the access point in NAT mode? if your smart home is connected to a wired network and you are trying to access via wifi, there will be no connection because the access point is setting up a separate DHCP. To fix this, you can enable Bridge Mode or create a firewall rule. the bridge mode can be found under wireless / Access control /addressing and traffic ... View more

The upgrade to version 13.24 fixed this issue. ... View more

thanks for the advice, i had taken a look at the documentation and wanted to see if there was anything automated i could do. ... View more

As earlier said; The roaming choice is decided on the client device itself which mainly is based on beacon frames and probe requests. Refer to the following document which outlines this in more detail and recommendations to weak these settings on a client device -decision https://documentation.meraki.com/MR/WiFi_Basics_and_Best_Practices/Client_roaming_and_connectivity_decisions_explained  ... View more

Hi Bill, After many years working with USB modems, pick a manufacture. We use DS product mixed results. We keep a couple Sierra Wireless and Novatel older USB modems, swap out sims when things get a bit odd and isolate it to a manufacture. One example. DS wasn’t working properly, so we switch to a Verizon USB Novatel USB modem. Sierra wireless has seemed to work the best for us. Well since Novatel pushed a firmware update, it didn’t work with Meraki. Then Verizon BGCO got wind of it and started to scramble, and then Apple blocked the USB modem from all Apple products because of security vulnerabilities. Nice chain of events. And it took Novatel over a year to step up to the plate. I would personally reach out to the current owner of the DS product line and see if they have any resolution. Then reach out to Meraki to confirm the firmware will work with whichever device you want to use it on. Over the years this has not been as easy as one would think. You might want to hit your head up against the wall at times but reach out. You’re not alone in this USB modem adventure. ... View more

There has been a nagging bug where content filtering was based on IP, not DNS - so it would block servers hosting many websites. Could have been related. ... View more

i'm not arguing just to argue, i'm trying to provide a view that isn't often discussed or considered on how usernames and credentials can be made more secure which is the root of the whole post, making a users login harder to know.   of course the more entropy you add to a password makes it harder to guess, i've never said otherwise in any of my statements. what i'm trying to say is that allowing special characters is not the only way to make a login more secure and shouldn't be considered a requirement. ... View more

@FRanky wrote: Do we have any indication where is the Meraki dashboard (and the entire engine) located? Within a Cisco facility? another ? What is the Resilience we have there? What happens if this site fails? Each dashboard shard (you can see your shard number when you log in.  nxxx) is backed up to a secondary cloud solution for fast recovery if necessary.  They have I believe 7 different cloud partners where shards can be hosted.  You can't choose where your account is, but it does have a highly available disaster recovery backup in case of disaster. ... View more

@MilesMeraki wrote: Hello @VRocha, I assume you are using "Top sites only" which is causing this behaviour? Have you tried changing this to "Full list"?  Second this.  I had a similar problem and changed the setting to full list and it fixed the problem, at least for us ... View more

Nope - if you've tried a factory reset and a different PoE port it appears to point to a dead AP. Give meraki support a ring, see if they can get onto the AP, if not they'll happily RMA the faulty AP. ... View more

You can't do warm spare at a switchport level with MS switches, only at a Switch level. ... View more

So we would have to use either the router in front and the SD WAN features on that or the MX? ... View more

Maybe.  What features of ISE are you hoping to replacing, or what features have you been using?   If you also use the Systems Manager agent you can replicate a lot of the functionality of ISE using dynamic tags. ... View more

I also would love to see this. I think it would revolutionize how one does hosted Firewalls. But alas for right now it's not on the horizon. Sad 🐼 ... View more

As-well as configuration templates you could also use configuration sync - https://documentation.meraki.com/zGeneral_Administration/Templates_and_Config_Sync/Cloning_Network_Settings_with_Configuration_Sync ... View more

The only other solution to this would be to seperate the Network into a MR and MX network individually (Not combined) and only setup syslog on the MX network?  ... View more

Cool.  I will do that Thanks ... View more

If you're using a dark fibre link from your branch to HQ it would make sense to terminate this on the Layer 3 core of the Branch and just create a static route to route all internal HQ traffic (10.0.1.0/24) over the linknet for that link.   ... View more

@Mwenya_Chansa Do you mind providing some more information to allow us to help?   If my understanding is correct, are you trying to stop LAN clients behind the MX from being able to VPN to external services? If that's correct you could setup appropriate firewall rules to stop these connections.   To be able to do this, you would have to find out what VPN connection mechanism they are using and then create a firewall rule blocking these connections outbound. Please refer to this document which outlines some of the common VPN mechanisms and associated port numbers - https://blogs.technet.microsoft.com/rrasblog/2006/06/14/which-ports-to-unblock-for-vpn-traffic-to-pass-through/ ... View more