This is resolved in MS 10.19 firmware.  ... View more

The name you supply for any Meraki device in Dashboard is used as the DNS hostname for the device (although additional characters are added - take a look at your DNS entries assuming you allow dynamic registration). See attached screenshot for where you name a switch on the individual switch page in Dashboard.  ... View more

Have you tried a factory reset on any of the problem AP's? Have you verified the LACP status of the portchannels? ... View more

Are all of these AP's on the same physical switch? Are there other AP's on the same switch not having the issue?  ... View more

Are you still seeing this issue? I'm up to 14.25 now and still having the random reboots.  ... View more

You'll see with most 1:1 deployments in schools that AP's are put into every room as it's a very high density deployment. I even work for some districts that have gone with AP's in every classroom AND in the hallways as they are going for density & coverage so students can work anywhere in the building without a problem.    As others have said, this all depends on the environment and what you're trying to achieve with the deployment.  ... View more

@PeterL L3 Roaming is only needed if your network is architected in a way that a user would be roaming among AP's which cannot bridge them to the same VLAN. I do agree that you've found a bug which shouldn't be occurring with L3 roaming enabled, but I would highly recommend moving to a more traditional deployment where you bridge clients to the LAN as I think you'll have a much better experience overall.    See here for the official L3 roaming documentation that explains the use cases where it's recommended: https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/Layer_3_Roaming   I do not believe the issue you're seeing is related to what's being discussed in this thread regarding issues with MR 25.9 firmware in Intel WiFi adapters.  ... View more

@CarolineS Much better! Thank you and your gnomes (or are they astronauts!?) for the update! ... View more

Congrats to @PhilipDAth (I do not expect your MOTM streak to ever end!), @Adam and @Uberseehandel! And thanks as always to @CarolineS for all of the amazing work you do on the community.  ... View more

Do you see the same behavior if you set the static IP's through the local config pages on the 425's? ... View more

You can use an LRM transceiver with OM2 fiber as long as you have mode conditioning patch cables. However you'd be better off using regular SR transceivers which don't require special patch cables. Note the distance limitation on OM2 fiber at 10Gb as @PhilipDAth brought up.    You'll want to plan on replacing the OM2 fiber with OM3 or OM4 soon.  ... View more

As @ww & @PhilipDAth mentioned, this will absolutely work. Since you are deploying MR wireless, I highly recommend using a network template and binding it to all of the MR networks (create one network per physical location!). I typically use Meraki group policies to assign the VLAN based on the user's AD group which impacts the RADIUS "filter ID" (this is what the Meraki group policies use). I use the same set of VLAN's at each building without any problem.  ... View more

@ccnewmeraki I really, really hope the MX team is working on getting this capability into the MX line with AMP. It'd be nice if eventually we could get to a place where Cisco & Meraki can launch these new features in tandem between the traditional Cisco products and the Meraki line.  ... View more

Agreed with @PhilipDAth. RADIUS is usually a critical service so it's worth having some HA there.  ... View more

It's been my experience with MS switches that they must tag management packets with whatever management VLAN you specify. So make sure that VLAN 2 isn't the native VLAN on the uplink and that instead it's an allowed VLAN on the trunk.    I just installed an MS120 today that was following a previous MS42 config where the management VLAN was the native VLAN on the uplink and it was not happy until I switched the uplink port's config.  ... View more

That's correct. Client VPN doesn't use the "in VPN" setting - it's only for site-to-site tunnels.  ... View more

You note that the Exchange server doesn't "directly receive mail" but port 25 is NAT'd to it. If this is accurate, and you're using a hosted spam filtering service, then you should limit the 1:1 NAT remote IP's to those of the hosted spam service so that 25 isn't simply open to the world.  ... View more

@RRuff1wrote: I am experiencing this issue on Meraki MR 52's.  We have 35 plus deployed across 3 floors.  Mention this thread/case numbers to the assigned engineer so they can get everything together if your issue is related. The more info the engineering team can gather the better.  ... View more

@Adamwrote: You can typically do one of those trial seminars and get a MX64. I have one at my house and use it to experiment and test frequently.  Much greater visibility than my old router.  This is definitely the better option IMO. You'll need a separate AP, but you'll have a "real" MX and the firewall is limited to 250Mb instead of 100Mb on the Z3 (although I rarely see my Z3 move above ~50Mb).    (You can always get a free AP & switch from other webinars...) ... View more

I'd suggest opening a case with Support so they can track the issue on 14.24 (there is still no known issue listed in the firmware release notes). I have case 02484511 open if you want to mention it.  ... View more

The DNS is configured with the DHCP options. See "DNS nameservers" here: https://documentation.meraki.com/MX-Z/DHCP/DHCP_Services ... View more

On the MX, you'll need to proxy all of the DNS to another server. On the DNS server (like a Windows server for instance), you'd only need to have any entries internal DNS queries and the rest would be forwarded to whatever you select as the upstream DNS.    You could also consider something like BIND if you'd prefer Linux (and don't want to deal with Windows licensing/CAL's).  ... View more

Are you running an internal DNS server or proxying everything to an external DNS server?    The MX line doesn't run a DNS server that you can add entries to, so you'd need to proxy the DNS requests to an internal server.  ... View more

What model MR is this on? Was this an issue prior to 25.9 firmware?   Just one observation - it seems like you could run two SSID's instead of three since your two NAT mode SSID's are accomplishing the same thing.  ... View more