This makes sense. I will move the MX to the electrical closet and route the tenant's WAN traffic through a private VLAN.    Thank you so much! ... View more

@PeterJames Good find. 🙂 ... View more

I don't see an error either. The port lists have to be the same length (i.e. the range has to be the same amount of ports) but they do not have to be the same ports. 8080 to 80 is two lists of one port. Since both list are one port they are the same length.   The example has 8000-8500 to 8000-8500, which it two lists of 501 ports.  ... View more

If you are using voice/video sensitive applications over the wireless, then I would disable as it will most likely cause your fast-roaming to not be so fast, dropping voice calls etc.   To be honest Nolan this isn't a major issue for us. All that might go over WiFi is the occasional Teams/Skype call. Not much more than that.   I would basically just check the power levels, that is usually the reason if an AP is blasting and the others are not. You can change the Indoor Profile for the power level range, in case its still set to default values of 5-30dBm. You might want to close that up to like 11-14dBm for example, or whatever your initial survey results intended for.   TBH I can't remember what the initial survey suggested for power levels, I'll tinker and see what works. ... View more

No, not just a test device is happening to every device ... View more

@Nembrey3  I apologize. You can also control what is accessed through "Firewall and traffic shaping" to control bandwidth and even do Layer 7 rules. i.e deny Social media, Proxy, etc.    ... View more

Oh the 9120 is fresh off the shelf then. Indeed in that datasheet there is mention of both DL AND UL-OFDMA ... View more

@PeterJames - Precisely!   Noe that is a plan I can get behind. I am in! ... View more

Hold still here ... View more

I think reaching out to your Meraki rep and also sending in a make-a-wish are to things you should do as well. ... View more

Meraki MX does not have an IPS option in Destination NAT. Sophos provides an option to apply IPS in Dest NAT rule and separate WAF module is available.   Meraki MX does not have any such option. All you can do is "Make a Wish" in the Meraki dashboard and the fairy angel will make your wish come true.    Only option is enable intrusion detection under Security Appliance > Configure > Threat protection and choose Ruleset to Balanced or Security. Traffic will be automatically blocked if it is detected as malicious based on the detection ruleset specified above         More info - https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MX_Security_and_SD-WAN/General_MX_Best_Practices ... View more

Long shot.  Is this AP near anything that could sink or reflect a lot of RF?  Examples are water, wire mesh, tinted windows, metal with lots of edges or points, etc?   In desperation, would it be possible to re-locate the AP a couple of meters away from where it is now, even with just a patch lead for 24 hours? ... View more

Congrats guys ... View more

More information   I had been prototyping a network layout where there is no "Trusted Lan" (See Google's BeyondCorp).  I enabled port isolation on my switches, and then Layer 2 Isolation on the RADIUS lan.  So the Layer 2 isolation is breaking the ability of a client on a Meshed Access Point to connect to the internet. ... View more

@LegoGeek you can pm me at dave.anderson@essential-consulting.com ... View more

It should in theory work but its usually not a recommended solution as issues might crop up. As long as your using an OPEN or WPA2-PSK SSID, roaming should work. ... View more

Thanks for setting this up!   ... View more

Oldest - Saw the Meraki Dashboard for the first time (2 Months ago)   Old -  Got admin read/write rights (2 Weeks ago)   Newest - Removed an AP from the Dashboard, and added a new one to the Dashboard.   😄 ... View more

If both MXs are connected to the same switch for internet, I presume your ISP/uplink is handing out two IPs? ... View more

OK, AP1 and AP2 are MR32s, AP3 and AP4 are MR18s.   AP4 is generating all the pause frames on this port; AP3 counters are four orders of magnitude smaller over the same period of time.   We moved AP4 to an unused switch port after cloning the existing port config (for VLANs, etc). So far 3000 pause frames received in about 30 minutes, with (currently) three clients attached; a printer, an iphone, and a kiosk desktop. In total over the last 30 minutes only about 100MB has been transferred. so it doesn't appear to be too busy. Ran another capture via the SPAN port and it looks the same. The reported source MAC didn't change; I assume its a 'generated' MAC since I can find no sign of it anywhere else, nor documented online. Reviewing details the 'destination' MAC is 01:80:c2:00:00:01 which is a reserved MAC for pause frames (this is new to me; I've not delved into this level before).   The port flow control is already disabled (and was on the original port). I enabled it temporarily and the port got flooded with pause packets, nearly 10000 of them in a few minutes. Then it slowed back down to the previous rate. I switched it back to disabling flow control.   No events logged, and the one client I tested (I was managing the kiosk which connects via AP4) saw no indications of trouble.   Maybe there is something about this particular MR18 that is wonky. I guess we'll wait to see once tech support gets back to us; I'm updating that case now.   Thanks Rich ... View more

@kYutobi wrote: Just triple checked. That's odd because I could before it was attached to the switch. Thanks for clarification @MarcP    Can´t remember I saw that anytime in the past 😄 😉   ... View more

This...  I recently became the network engineer for the company I am working with, and one of the challenges has been wireless.  Our wireless settings were all over the place (some APs with the dB statically set to 30), and our channel width was set to 40.  Once I toned down the dB and I also changed the width from 40 to 20, that has helped tremendously.  We use some computers that run telnet based software that is sensitive to locking out and we were going from unlocking 15 sessions/day to 1 every couple of weeks.  With the density of our network, changing the settings helped out, and may very well help out OP.    ... View more

On Cisco "classic" you have to put ip-helper addresses to the VLAN´s to allow DHCP requests over different VLANs:   interface Vlan1 description Management VLAN ip address 10.1.0.1 255.255.254.0 ip helper-address 10.1.2.10 ip helper-address 10.1.2.11 ip helper-address 10.1.2.12 no ip redirects ip directed-broadcast 101 no ip proxy-arp arp timeout 60   maybe you can do this on a MX ? ... View more

Even with supervised iPads I've noticed it seems to be 30+ minutes before a device flips from online/now to offline/last checked in. ... View more