It's worth noting that there's a basic level of storm control present on all Meraki switches. The configurable version is only available on firmware versions 10.0 and higher, but not available on the 120 line.   https://documentation.meraki.com/MS/Other_Topics/Storm_Control_for_MS ... View more

@Uberseehandel Thanks, I needed to be reminded of my teenagerhood tastes in music.  ... View more

@PhilipDAth is bang on here. If your ISP didn't provide a device with multiple ports, then a baby switch between the ISP device is what you need. My firm typically uses an MS120-8 for clients already using Meraki equipment, since then we can just manage it from the dashboard.   Pretty easy setup. Say ports 1/2/3 are for Internet access. Put them all on the same vlan with a random number. ISP device goes into port 1. Port 2 -> WAN1 on your MX. Port 3 -> WAN on your vendor's device.    Set port 8 to whatever your management vlan is, and connect it back into your LAN for mgmt purposes. ... View more

If I may suggest an ordered troubleshooting list:   1. Identify the switchport that the AP should be connected to. 2. Verify the switchport's config. If it's good, continue on. If it's misconfigured, fix that! 3. Connect a known-good device to that switchport. Do you get the connectivity you expect? Assign a static IP address if necessary. 4. If the switchport is good, start changing cables one at a time in between the switch and the AP. Make sure you know these cables are good. 4a. If there's a power injector involved, swap that out too if you can. 5. If the switchport is not good, configure an empty switchport to match the settings. Check it using your known-good device. 6. If the new switchport works on your device, connect your AP back in.  7. If AP comes up, victory! Otherwise, do steps 4 and 4a. ... View more

What's your general comfort level with network basics? You might try the ECMS1 class for specific instruction combined with lab time.  ... View more

Now that I'm off vacation, I'm really gonna have to catch up... Good job, everyone! ... View more

Is there a particular reason why you're on 1607? That's a pretty old version of Win10, to the tune of no longer being updated.   I'd update your OS, then try PowerShell again. If you need a scripty variant, I've put one together. ... View more

@Phil_SCDS(Edit: If your user is Win10) Is there any chance your user is able to run a PowerShell script? I realize that may be disabled for security purposes, but I live in a world where lol security so.   I've got one that's fairly simple and can be changed to not require administrator permissions. There's comments in it that tell you exactly what to change, although please do test on your PC.    To run:   1. Open PowerShell 2. Allow PowerShell to run the script with this command: set-executionpolicy -scope process unrestricted 3. Run the script. 4. Answer the prompts. 5. Close PowerShell   If you walk through it, you can probably write better instructions. My help desk has significantly longer ones but they're not easy to share. ... View more

@SoCalRacer For what it's worth, when using the roaming client at an MSP, I absolutely recommend allowing your on-site techs to temporarily disable the Umbrella RC. If I'm on a client site, I may need to use specific DNS on their network, and the RC doesn't always pick that up.   We're only allowed to do this so long as we very carefully re-enable it the second we're done.    Everyone else? Install the invisible version and be done with it. We've 100% had people who "didn't want to be spied on" who've left the service turned off. (Who expects privacy on a work PC in the United States?) ... View more

A large portion of our workforce is at least partially remote. Heck, I'm remote right now while I wait for something to run.   We use the Umbrella roaming client to ensure people aren't browsing Bad Places on their work devices, without forcing them to use a full tunnel VPN. ... View more

If you have Meraki APs: Go to Wireless -> Configure -> Firewall & Traffic Shaping for that SSID.   Under Layer 3 firewall rules, set the "Wireless clients accessing LAN" policy to deny:   Otherwise, use your normal L3 firewall on the MX to deny those LANs to each other.   Here's a good doc: https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/Using_Layer_3_Firewall_Rules ... View more

I'd definitely try the Proxy Avoidance and Anonymizers category in content filtering. Umbrella's got a category of the same name that is fairly effective at even blocking the websites for these services.   If you're not sure what category something falls into and you have a specific URL, there's a URL category lookup tool on the Content Filtering page: ... View more

The information on that page is correct. I have dozens of users on Win7 that successfully use the client VPN, so I don't think your problem is encryption.   My questions for you:   Did you delete and re-create the VPN connection? Does it work?   If you try this under a different Windows user on the same PC, does it work?   If you try a different VPN user on the same PC, does it work?   Can you successfully connect using that username on a different PC? ... View more

I've got two major wishes for the API right now:   1. Pulling firmware versions. 2. Managing the client VPN when you're using Meraki Cloud credentials. 🙂   Maybe we'll get lucky soon. ... View more

@chengineer You were pretty persuasive. Watching one of your presentations genuinely altered the course of my career. I'd already taken a good chunk of programming classes, and used four or five languages... But I was setup to be a normal rack-and-stack CLI for days engineer, like the senior network engineers at my company.   I went home, spent a few weeks asking the Stack Overflows "how to do X in Python". Now I'm the local advocate for as much automation as we can create or effectively and affordably implement via a vendor solution.   Which reminds me that I need to go finish re-writing a script for elegantly pulling CDP/LLDP info from MX. Hopefully that's my morning! ... View more

Add me as another voice for "troubleshoot the non-network elements before blaming the network".   When I've run into this before at clients, it's usually due to problems with the print server (driver version often) or the printer itself. I can't think of a case where it's been an actual network issue, even though it was definitely affecting multiple users. ... View more

Did you make the port change and the LLDP changes simultaneously, then saw improved POE behavior, or did you do so at separate times? Curious so I can keep an eye out for this at my clients. ... View more

Are you experiencing any problems, or are you only concerned about the information you're seeing on the dashboard? ... View more

Oh, I have a thought.   Are those users allowed to dial-in remotely? Here's a goodish screenshot: https://gtacknowledge.extremenetworks.com/articles/Solution/RADIUS-Authorization-not-working-due-to-Windows-Active-Directory-account-restrictions ... View more

Interesting.  I'd:   a) remove the user from the VPN user group. Apply. Give it a few min. Add user back to the VPN user group. Test.   b) If A is a no go, remove the user from all groups but the VPN user group and test. If it works, start adding back in other groups until it breaks. ... View more

Okay, sounds like you're sure that these users are members of the necessary AD users group?   If you clone one of the problem users and create a new account based off of them, can you replicate 691? Or does it work? ... View more

I don't think you can update IP or DNS info via API. It looks like update device attributes only allows the following:   { "name":"Your AP", "tags":" recently-added ", "lat":37.4180951010362, "lng":-122.098531723022, "address":"1600 Pennsylvania Ave", "moveMapMarker": true }   It would be great if we could update stuff similar to updating WAN settings on an MX. So, so great. Edit: Wait, does this only work on MX? I only see reference to WAN ports.   Would your monitoring system settle down if you had reliable reservations setup? Or did you run into problems with that? Just curious - that's been our solution for monitoring Meraki devices with Auvik, but we're not sure if it's the best one or not. You'd still have to make that change manually across all devices... ... View more

1 or more APs is functioning as a repeater, maybe? ... View more

Looks like you could pull this together with some loops iterating through arrays. (You know... like most Python Meraki scripts.)   https://dashboard.meraki.com/api_docs#list-the-devices-enrolled-in-an-sm-network-with-various-specified-fields-and-filters <-- call this and filter by the tag you use for student devices. Shove the results in a variable.   Make an array of the ID numbers or serial numbers.    for item in numberArray:   call https://dashboard.meraki.com/api_docs#wipe-a-device ... View more