Definately need more examples! ... View more

was this ever solved? ... View more

Posting this for anyone else having this issue and is using Telstra (Australia) and searching this issue in the future.   We have hundreds of sites with backup connection via Telstra 4G Data SIM. Provided you are on the telstra.extranet APN. Things will work no issues because you get a proper public WAN IP. You need to ensure the Meraki is set to use the telstra.extranet APN. How to get telstra.extranet APN? You need to be on an enterprise or corp level account with Telstra and ask for telstra.extranet to be enabled on the service (magic code GPTEXB3 needs to be added to the service). Telstra by default will put you on a 10.x ip range as they don't give out a pulic WAN IP for  just any customer. If you are a Telstra retail customer. You will get CGNAT and you will have issues. ... View more

Thanks. That make sense. ... View more

Those barcode scanner scan like 20 characters barcode so bandwidth requirement is practicaly nothing! ... View more

Thanks for all the advice / sugestions so far.   Yes, we are using WAP2 PSK.   Interesting on the Min rate. My thinking that you would go the other way (set a higher minimum rate) as to force clients to jump faster soon as the rate drop (they are far from the last AP).   I'll check out 7Signal MobileEye. First impresion on it is the website has no pricing and just a bunch of fluffy marketing video which doesn't tell you anything about the actual product. ... View more

@Dinesh2  Did you ever get to the bottom of this issue. What did Meraki support say?   We've been having weir issue all last week to do with some traffic not passing from VLAN A to VLAN B. Both on the same physical switch.   Then I noticed this when I looked at the switch event logs. This seems to be happening across the switches that we are having issues. The affected network has oly a single switch so shouldn't even have any RSTP issue. ... View more

Confuses with your comment on you are not supposed to do certain things?? If you are the guy that need to make this work. Then you do what needs to be done. If you have someone more senior then they should be doing this work.   We have the same setup to allow our spoke sites to access central resources and practically no site to site comms.   Everyone has mentioned all the points I was going to say. I'll just add a couple of things / rephrase some things if it may help with your understanding.   Best to assign a supernet IP range (example 10.123.0.0/16)  that you add to your template. Then set the template to auto generate unique IP address range per site (on creating new site and binding it to the template).   To keep thing simple, maybe best that you "clone" your current template.To do this make a dummy network out of current template. Then create a a new template by cloning off this dummy network. Now you have a new template based on the old template.   After that make the changes like adding the supernet to this new template etc. That way you don't disrupt your live site operation (still using the old template) while you live change the template settings. Make sure to set the unique address as per previous reply by @PhilipDAth  Re template limitations: If you can strictly stick to what the template can provide and let you change. It it a huge time saver. If down the track you find that tempalte is not cutting it (can't make certain changes). You can unbind a network from the template and it will keep all the settings it has at the point. Then change setting as required as now template restriciton no longer apply. Also, you can create and bind a new site to a template, to grab the initial config (like let it assing a unique ip range) then imediately unbind it from the template. Then migrate each site, aka move Meraki devices into newly created network (using the new template) during your outage window. Once you do the above. Then you will be in a much better position. This should have been done on the get go when those site were put on Meraki.   Edit: Fix spellings!   ... View more

The issues we have with AutoPIlot are ussualy   1) Web Proxy (we use Zscaler) 2) Meraki Content Filtering rule.   You can try putting Fiddler one of the AutoPIlot machine and see what URL it stuck on?That will give you a clue as to where to look.   Make sure to allow the URL Microsoft listed for AutoPilot to work. Also check that its not stuck on trying to do WIndows updates, ... View more

If I understand it correctly.   1. Each site has the exact same subnet 2. You only want site to talk to the Hub. But not talk to each other. 3. Some site will not have MX util a later date.   For (1) You are going to have issues. Best get through the pain now and resubnet the sites to unique subnets.   For (2) Meraki Auto VPN will take care of the VPN (that what you are paying for). Then simply have Firewall rules to allow / deny traffic as needed.   For (3) If the 3rd party devices can do IPSec then you can do an IPsec tunnel from those sites to Meraki. Then replace them with MerakiVPN when they get an MX. ... View more

We have Meraki to Fortigate working. We control both ends. However have recently retired that. Sounds like issue is on fortigate end. ... View more

Have you tried searching? There is an old thread here   https://community.meraki.com/t5/Security-SD-WAN/MX-16-16-Always-On-Anyconnect-VPN/m-p/168149 ... View more

@AmyReyes  Just noticed that I'm a winner. The forum email was in the Junk mailbox 😞   Can't see any email from you guys for sending the prizes? ... View more

I'm trying out the Moble App again.   For SignIn with SSO option what I'm I meant to put it as the SSO subdomain?   Edit: Never mind. Looks like more config is required just to use the Mobile app via SSO. ... View more

I'm interested in this topic as well.   I recently started to play with Zabbix as well. You might be intstrested to know Zabbix has a built in template that can query Meraki via API https://www.zabbix.com/integrations/meraki I've not mananaged to make it work as yet.   It would be great if we can have longer term packet loss data and higher resolution. I find the built in graphs lacking as well. ... View more

Thanks. I'll give that a shot as well. ... View more

There is an error in your quoting. What works for me is https://developer.cisco.com/codeexchange/github/repo/gve-sw/GVE_DevNet_Meraki_MX_Firewall_Provisioner/ ... View more

You get a list of networks then loop through that using Python. Take a look at this example code and adapt it to your requirement https://github.com/meraki/dashboard-api-python/blob/main/examples/org_wide_clients_v1.py     ... View more

On the MG Uplink page you can set which SIM is primary then it should swap back to the primary SIM (if active sim is not currently primary SIM). You can also try to reboot the MG to force it to go back on primary SIM (if an option).       ... View more

Have you posted this using the Dashboard Wish List feature? Thats the official place to request feature. ... View more

Thanks for the confirmation. Just wanted to check in case Its there and I can't see it.   I guess I have to put it in the wish list! ... View more

Not in all case you will have access from a workstation and or need to quickly check for issue before contacting the user and jumping on their workstation.   Example we have a network where there are only custom Andriod devices with no way to do a traceroute from them. ... View more