Hey all,   You can find complete SFP compatibility on this page: https://meraki.cisco.com/lib/pdf/meraki_datasheet_sfp.pdf   On the right hand we have marked the models compatible with each SFP type.   Hope this helps.   Giacomo ... View more

Hey @GianPaolo,   You can determine which uplink is preferred from the Security Appliance > Traffic Shaping page.    There is a section called Flow preferences and under VPN traffic you can select your preferred path and the failover behaviour.    You can find info on the routing behaviour of the MX here: https://documentation.meraki.com/MX-Z/Networks_and_Routing/MX_Routing_Behavior   Hope this helps!   Giacomo   ... View more

Hey @silvio_sln,   From the looks of the error message, it might also be a resource problem. It may be worth checking the Task Manager Performance tab (or Resource Monitor) to ensure you are not running out of memory, so there would be no spare to allocate for the WMI query.    Thanks!   Giacomo ... View more

Hey @stevebg4,   The Client association expired is different from the Unknown reason message.    In the first case there's a few possibilities, like the Client leaving the area of coverage of the AP.   The Unknown reason, normally indicates that this has not necessarily been triggered by the AP and there might be other elements interfering with the re-association.    Make sure you try and take packet captures as well when you troubleshoot this kind of issues as they can help you understand if the disassociation is coming from the client or from the AP (and they help us too, should you contact support to get help to resolve this! 🙂 ).    Thanks!   Giacomo ... View more

Hey @--JayJay--,   Keep in mind that if there is another AP in the area, we will try and mesh with it to gain connection.   You can easily see if this is the case from Dashboard by checking the Status symbol in the Wireless > Access Points page; if it's an empty green circle, it means it's meshing.    Alternatively, on the page of the AP, you can go in the RF tab and check the Mesh neighbors section.   If this is the case, it would explain why you are still not seeing the AP default meraki_setup SSID.   Thanks!   Giacomo ... View more

Hey @--JayJay--,   Definitely weird. Do the lights go off for a moment after a few seconds of pressing the Reset button?    Normally you would push the button for around 15 seconds and at some points the light on the AP would go off and then turn back on again and cycle through the rainbow colours.    Maybe make sure that the AP doesn't have internet access, so it can't download its configuration before it starts broadcasting the meraki_setup SSID.    Thanks!   Giacomo ... View more

Hey @rinat,   ***Theoretically*** any power supply with the correct connector and power ratings would work ***But*** we wouldn't be able to support you if anything breaks.   I would personally avoid taking the risk and get in touch with an authorised reseller as per @PhilipDAth 's link. I'm sure they'll be able to sort you.   Thanks!   Giacomo ... View more

Hey @ZDonaldson,   I'm with @jdsilva on this one. I think in your case you would be better off having the WiFi network separate from the rest (you can do a Split network by selecting your combined in the Organization > Overview page)  and you can then assign Administrative rights for the relevant accounts to just that network.    Let us know if this works for you. 🙂   Giacomo ... View more

Hey @PhilipDAth ,    I would expect to have to request it from the client itself (e.g.: ipconfig) . The only thing I haven't tried is if the MX is going to recognise it, as it normally reports the VPN clients from an IP perspective rather than a mac (which I assume is what you were getting at).    It would be interesting to try it out.   Cheers!   Giacomo ... View more

Hey @Adoos,   Can you try upgrade to the latest 10.33 and see if that resolves the problem? I know in one of the releases there was a fix for something OSPF related, although I don't recall exactly what it was.   Thanks!   Giacomo ... View more

Hey guys,   Further to Philip's post, is there any reason why you are using Websense rather than the inbuilt Content filtering provided by the MX?   Thanks!   Giacomo ... View more

Hey @Butters,    I would recommend using traffic shaping and quality of service as much as possible. That way you can have granularity over what traffic is going to receive what portion of bandwidth.    Regarding the impact, I agree with the guys above and would normally expect encrypted traffic to chew up double the bandwidth normally used. The overhead for VPN is not that much, but the process of encrypting and decrypting traffic can be quite time consuming.    Thanks! Giacomo ... View more

Hey guys,   Have you tried creating the clients via mac address and applying the policy prior to the client creation?  https://documentation.meraki.com/MX-Z/Group_Policies_and_Blacklisting/Pre-configure_Network_Policy_for_Client_Devices   Thanks!   Giacomo ... View more

Hey @ZDonaldson,   It might also be interesting to check if the console of the browser chucks out any error message when you try and visit the page. Might also be worth comparing it with the browser which is working.    A Wireshark trace might be interesting as well, it might show what the response is and how it differs from the normal response.   Cheers! Giacomo ... View more

Awesome 🙂 It does sound like a rather complex setup...     I wish you good luck with the rollout then! 🙂    Giacomo ... View more

Hey @Gumby,   10.31 has been moved to Stable release candidate, so could you try to upgrade to that version and see if it succeeds?   When this type of issues occurs, I would recommend to give us a call as we can push different firmwares to the single devices to try and sort this out.   @PhilipDAth yes! I find the way upgrades are handled in Meraki quite good as they require minimum input from the users... I remember the terrible times of setting up an FTP server on my laptop just to move an image...  We try to do things sequentially, so we would first store the new firmware on all the devices, then install it on the first, reboot and follow with the second and so on.  Regarding the stack, I think it is a very common recommendation to have all the devices on the same firmware release when you stack them as otherwise all types of mysterious and magical things can happen to it, so when you trigger a firmware upgrade for switches in a stack, all members will try and upgrade to maintain consistency and stability 🙂 I remember Alcatel switches were particularly troublesome in that regard... the pain...! 🙂   Thanks!   Giacomo ... View more

Hey @Craighaty7,    Do you normally have computers connected or a different type of device? You could potentially track down the ports easily by putting the mac address in the search field of the Clients page, then select the device and should tell you where it's connected. Another possibility that might help with non-PoE devices could be to allocate a number of ports specifically for them and disable PoE on the ports configuration. This would obviously not help you in the case of PoE clients.   Hope this helps. Giacomo ... View more

Hey @ZDonaldson,   The firewall rules you created, are they from the Security Appliance > Firewall page?    Could it be that the problem is not on the traffic outgoing to the internet, but in the response back to the client? In that case it may potentially (sort of) make sense, assuming the MX is generating a new flow when it's going from itself to the VPN client as it would use port 500/4500.  If that's blocked, traffic going back to the client will be stopped on its way to it.   Could this make sense for your situation?   Giacomo ... View more

Hey all,   I'll just silently leave this here... https://documentation.meraki.com/MX-Z/Deployment_Guides/Datacenter_Redundancy_(DC-DC_Failover)_Deployment_Guide   🙂   Giacomo ... View more

Hi @AlexG,   Got it! So you are effectively looking for a decent 4G modem that you can then RJ45 back to the MX, correct?   I hate to say this, but if you are looking for a cheap offering whose job is just going to forward traffic to 4G provider, you could look at the likes of TP-Link / Netgear and D-Link, keeping in mind that they are not enterprise grade. Draytek might be a solid middle ground, but you'd need to find a way to have it working as a modem and bypass all the traffic inspection that it carries out.    I haven't seen a very big offering in Europe for this type of modems and the ISPs I interacted with have either gone with a well positioned router with inbuilt 4G or an external cheap alternative of the likes I mentioned above.    I not this is not exceedingly information, but I hope it helps somewhat! 🙂    Giacomo     ... View more

Hey @franfm,   In addition to @ww link, you can also disable the local status page from the Dashboard by going into Network-Wide > General > Device Configuration.    This helps prevent users accidentally (or intentionally!) trying to access the local status page.   Giacomo ... View more

Hey guys,     Just jumping in to say that, assuming the issue is related to the anti-replay value as @OHTorx is advising,you should be able to change the anti-replay window size on the ASA side: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dplane/configuration/15-mt/sec-ipsec-data-plane-15-mt-book/sec-ipsec-antireplay.pdf   Hopefully this might be a less disruptive test than a firmware upgrade .    Keep in mind that the 15.X release is currently on unreleased Beta and we are using it for customers who face particular issues that are resolved in that specific release, which is why you are unable to schedule upgrades to it manually.     Hope this helps.   Giacomo ... View more

Hey @AlexG,   You can find the list of all the supported modems on this page: https://documentation.meraki.com/MX-Z/Cellular/3G_-_4G_Cellular_Failover#Supported_USB_Modems   They are divided by country so it should be fairly straight forward to find one that suits your needs.     Hope this helps!   Giacomo ... View more

@Adam @CarolineS , it's CONTEST TIME!!! 😄 ... View more

Hi all,   Once again, I would like to thank you for this feedback. It is great to see interest in expanding the knowledge and training of the Meraki environment.   We strive to try and make our products as plug and play and easy as possible, so that you could potentially give it to my 90 years old grandfather and he would be able to set it up 🙂    The truth is somewhat more complex as networking is not that straight forward and each of us has a different approach and preference to the way we like to set things up; the features also go quite in depth at times and cover topics that your average Joe wouldn't know about or that Meraki handles slightly differently and this is, I think where we find the need for training.    We do offer the CMNO training for the Meraki customers and partners ( https://community.meraki.com/t5/CMNO-Resources/Course-Information/ba-p/12520 ) and that's specifically targeted to end users to give them the foundations to manage their network.   The target of the CMNA is pre-sales engineers and that is why the eligibility includes partners and solutions providers.  I wouldn't class the CMNA as a better training compared to the CMNO; the two sessions are different and have different audiences.    We also need to keep in mind that we have a very comprehensive documentation website and that we have resources to help with design advice.    I think @BlakeRichardson is actually doing the best thing he can and the one we appreciate the most, which is being transparent and provide us feedback every step of the way. This is the way Meraki evolves and revolves around you as customers.  I know you might have been waiting for a long time now, but we want to ensure that if we introduce something, we do it properly.    Keep on showing your interest on receiving more in depth training and I recommend also writing (this topic is a good place to start) what subjects you feel we should expand on.    Thanks!   Giacomo ... View more