My apologies, I need to read better. For "Flows Deny", I am 99% certain that it's going to be an inbound connection from an external IP. We get tons of them every day. I can't give you any other information on Syslog. We let our SIEM translate it. I'm sorry. ... View more

I know this isn't what you want to hear, but we've had this issue before and ended up factory resetting the switch. It then worked. Try what the others said first. 100% worth a try. ... View more

Adrian,   For the "Flows Deny" that sounds like the ACLs in effect. This includes the switching ACLs and MR ACLs.  Meraki will not block any LAN/Outbound connections unless you specifically state to do so. By default, it's in an allow state. However, for the MRs, it will automatically block LAN connections. You'd have to go into Wireless -> Firewall & Traffic Shaping, then check those rules.   For all inbound traffic being blocked, you can view the Security Center in Security & SD-Wan -> Security Center. You can see what is being blocked through the content filter, and what is being blocked in general based on pre-defined rules via Snort. You can also see these logs in Network-Wide -> Event Log.   Hopefully this information helps. ... View more

Leaning towards it's a switch issue. Possibly out of date firmware for your switches? Know they made some changes to unexpected reboots and such in the MS/CS 15.X upgrades. ... View more

Team,   Do we know for sure if this is a stable version? Doesn't appear that way in the Firmware Upgrades page.   Thanks. ... View more

Yes. I should've looked at the Event Log more carefully. Clients aren't receiving I.P.s from the DHCP server. Make sure you set up DHCP server correctly whether you are relaying or setting up Meraki as one. ... View more

I actually currently have this issue, but have chosen to ignore it since it hasn't had any impact on anything. What'd I'd do is look up the MACs by going to Network Wide -> Clients and see what comes up. Maybe there are 2 devices with same MAC address but with different IPs? Maybe 2 of the same IPs on 2 different MACs? See where they're getting an IP from. You can also check to make sure they are in their proper VLAN. But, this happened on my MX and I believe it's because of the way I configured the ports on it. However as I mentioned, it hasn't impacted anything so I let it be. ... View more

Can confirm. ... View more

Just to add to what Alemabrahao said, you can think of NAT mode as a "Guest" network. It is completely isolated from your local LAN. So any of your clients getting an IP from a Domain Controller or DHCP won't be able to reach those clients. If you switch to Bridge Mode, those clients will receive an IP based off the subnets you personally created and as a result, you'll be able to communicate over the LAN. They may start getting 192.168.9.X addresses depending on how you configured it.   Hope that helps. ... View more

Usman,   I had this exact same issue with Chromecast. Meraki is a little odd with it. What we ended up doing was set up an SSID specifically for Chromecast. We have the SSID running in Bridge Mode. We had to make sure in Wireless -> Firewall & Traffic Shaping to allow anything on Local LAN. After that, our devices were able to communicate with Chromecast and cast to it. I know you mentioned that it had nothing to do with wireless firewall but make sure to double check the SSID because Local LAN is denied by default. You have to change it to allow.   Let me know how you do. ... View more

VBardy,   Pretty sure the only way you can see firmware changes are in Organization -> Firmware Upgrades. You should also see the update go through in the event log. You can also take a look at the Change Log located in Organization -> Change Log to see if there was a firmware update pushed. Hope that helps.   Nick ... View more

As what rhbirkelund said, you can think of the Meraki Portal as more of a "management" thing than it is functionality. (At least for APs). If you move all of the APs to a single network, (for example, Access Point network), you can update all of the APs at the same time including firmware, SSIDs, firewall rules etc... That's what we do on our network.    You can find SSIDs and tagging under Wireless -> SSID Availability. You can tag APs by going to Wireless -> Access Points -> Click a square next to AP -> Tag   **BE CAREFUL**. If you have different models of APs, that network may automatically rollback those model of APs to a version that they can work with. This has the possibility of affecting sensors, cameras etc... You'd need to reach out to support and ask them to "Lock" firmware versions.   To add, when you move the APs over to the network, expect downtime if the networks are configured for different firmwares. It may be easiest if you upgrade all the networks your APs are on to a firmware you want to stick with. (Go for firmware version 30.6). Then when you move the APs over, there will be 0 downtime, for they don't need to be upgraded/rolled back to the network configuration. Nick ... View more

(Sorry for English).   I need a bit more information. Are you connecting a PC directly to the firewall or are you connecting to a switch?   If you are connecting it directly to the firewall, you have to enable DHCP requests for it to be assigned the IP you specified in that range.   ... View more

It should've automatically added it to the Event Logging? We have a few MVs and there's a category "for cameras".        If you don't have the option, I'd contact support. ... View more

Agreed. I'd use a VPN client to accomplish this. ... View more