I have previously done some testing on the Meraki APs regarding max transmit power an different external antennas, versus the maximum allowed EIRP in my regulatory domain (Denmark / ETSI) because the external ones , especially the MR46E had a clear problem when compared to a normal Cisco AP.   I never got around to testing on 5Ghz. 😕 Sorry. But my results are here : https://docs.google.com/spreadsheets/d/1-s5IOMg09DTCFnODNapsYXta_onfO4W6SqG3E6sn9tg/edit?usp=sharing   I your case, the antenna gain on 5Ghz in a MR57 is 5,5dbi, and the max EIRP in the US (as far as I remember) on UNII-1 is 23dbm (200 mWatt), on the UNII-3 channels in the US its 30dbm (1 Watt) ??   So the offset, if the AP is running in UNII-3, and you have your 23dbm radio power + 5,5dbi antenna gain =  28,5dbm EIRP , is missing 1,5 dbm of transmit power. Perhaps that AP is not able to turn up / down the power in such small db steps (this is me speculating, I have no knowledge of this). But it could mean that this is the max power of that AP. ... View more

Hmmm I cant apply Smart Port Automation on ports anymore since upgrading. Ports that has a Automation applied are not affected, but ports without, that I want to apply an automation to never gets the config. *Sigh* ... View more

Well we have had static routing , and even OSPF on other platforms. https://documentation.meraki.com/MS/Layer_3_Switching/MS_Layer_3_Switching_and_Routing But the MS150 is quite comparable to the MS2xx series in this regard.   But more interesting things are coming Im almost sure of it, hint hint, nudge nudge, say no more. ... View more

Following-up on my own post. Advanced Security Licensing is now available for ordering for the vMX platforms. Example sku: LIC-VMX-S-SEC-1Y Today, the online FAQs and other licensing documents do not look to be updated showing exactly which features this license provides. Also this new Adv. Sec license tier seems to be impacting dashboards running mixed Enterprise and Advanced licenses that was not an issue with vMX prior. https://community.meraki.com/t5/Cloud-Security-SD-WAN-vMX/vMX-now-requiring-edition-to-match-org/m-p/258331 Will keep watching for updates. thx. ... View more

A further update - my issue turned out to be time synchronisation on the VMX.  It was too far out from the SAML provider.   Just in case anyone else runs into this issue, about once a year when running in Amazon AWS, I see this event: msg: SAML: Assertion is expired or not valid   The VMX and the SAML provider have to have their time synchronised to within 3 minutes of each other.  Anymore than that, and you get the above error.  When the VMX runs in Amazon it seems to source its time from the host (rather than NTP). The solution to fix the issue to to shutdown the VMX and then start it again.  This moves you to a new host, which 99.999% of the time has the correct time. ... View more

Thanks, Ill accept this as the "solution". 🙂 I just wanted to be sure, and, for some reason, Im a bit ehhh disappointed, that you cannot do anything about it, like on the classic solution. ... View more

Sorry, I have not seen that issue on 17.x. I have only experienced "fun" things with Smart Port Automation and trunk ports. Where the port, after being set to trunk by the Port Automation, seemingly stops forwarding packets on non-native vlans. The switch however says that there are clients on that port, in tagged vlans on the port, when looking at the mac address table. ... View more

I think we are all waiting for the native tunnel to be used for monitoring as well 🙂 Then things will get better ... right ? 🙂 I mean the command is kinda already there - if anyone has tried and been to impatient with waiting for the switch to reset when adding it do a network using the "cloud native" IOS-XE versions. test platform software config mode managed <- starts the conversion to "meraki mode" with the new software. But : test platform software config mode ? - tells you that there are options for "monitored" and I seem to remember the last one was called "catalyst" , Im guessing that last one is what Meraki supports sends to the switch in order to revert it back to "catalyst persona". ... View more

Yes. It's happening to me right now on my MS350. Was it resolved? ... View more

Many thanks for testing. Maybe I will give the "new", now stable version, a try. Also i.e. Streaming and Webex (with Video) in parallel caused issues in my environment. I have around 20 Clients connected via wireless. My Intel clients running on the same versions and adapter. Let´s see if the behaviour has changed 🤞 ... View more

In the beginning I actually thought it was more things that caused this, like changing / adding / removing an ACL and so on. But it seems to only be when I change a DHCP setting. It happens when I change DNS settings, when i reserve an IP in a scope, and so on. I created a case, just to check my sanity 🙂   And I only discovered it because I was setting up this new network for a customer, and of course, in that process, where changing "a lot" of settings. And my network connection was , ehhh, wonky. Initially I thought sure, I was connected to a switch or AP that was just connected and needed a firmware upgrade, but I have now narrowed it down to this. ... View more

If I get bored, I'll put in a feature request to Duo to add this to the "easy" setup.   I have previously asked them to add a field for AWS, and they did! ... View more

You are right. You can only use the MR-SUB with old APs, and the Wireless Network-SUB with new WiFi7 APs. - I just learned this.   But co-term licenses are "free for all".   BUT .... If you acquire WIFi7 APs during your MR-SUBs lifetime you can get your MR-SUB licenses converted to Wireless Network-SUB (I just read a very long document about it).   But whats really dumb is that you cannot, up front, when aquiring a new sub use the Wireless Network-SUB for old APs, why not just let me buy those ? I dont get it, at all.   @GIdenJoe  - I just PM'ed you a "thing" 🙂 Hope it helps. But still as I say right now about these licenses : "Alright, this has become far too silly, let's end this before it becomes sillier" - Monty Python ... View more

Now we just need the same for MX and the switches. (I know we kinda have it for MX, but still, on the appliance page would be nice). ... View more

Hi Chris,   Thanks for the update. I have a couple of questions though.   1. Is the User Authentication via the Splash page for Entra ID only available with MR Advanced licenses? If so, could you clarify why this is the case, considering that the Google authentication via the splash page is available as part of the Enterprise license?   2. Based on our experience with the Meraki Splash page, clients have difficulty getting redirected to the splash page, primarily due to encrypted traffic (HTTPS). Users often have to perform extra actions to trigger the splash page, which feels a bit clunky. While I understand this is a common challenge with captive portals in general, has Meraki looked into improving this user experience to make the redirection process smoother?   3. I'm also intrigued by the EAP-TLS authentication method. It seems that customers would need a RADIUS and PKI infrastructure, where the identity from the certificate (such as name or email) is checked against Entra ID to validate the user. Or are we looking at a much simpler setup? ... View more

Just checked , there is no "Mobility domain" in the beacons, and I think that means no 802.11r ... View more

Just some Apple shortcuts made by Adrian. https://www.intuitibits.com/2023/09/21/yet-another-wi-fi-details-shortcut-for-ios/ ... View more

It does seem odd to introduce an issue!  Does it occur when you have a device that doesn't announce itself as a voice device (perhaps an ATA or similar), but you know it is, so you set the data VLAN on that port to be the same as the voice VLAN to ensure that it gets the correct IP address? ... View more

Correct.  When I advertised the SSID publicly, its visible and I can connect.  When its hidden, the SSID is not able to be connected to.  The wireless GPO lets PCs in the GPO security group see the SSID and connect based on computer certificates.     This works as intended for all other devices except Qualcomm network adapters. ... View more

I got the answer through other channels. (I dont think Im allowed to share here). But Ill just mark @Inderdeep's answer as the solution. 🙂 ... View more

Pinging towards wireless clients usually is not that stable. If  you can see the PHY rate on the clients please do check. Then check on the Meraki side what the SNR of the client is (if you go to an AP status page you can see each connected client and his upstream signal strength which is the SNR).  If it is above 30 dB your connection is excellent.  Then you still need to check the airtime utilization on the channels of the AP on the same page.  Also check which channel the clients are connected on.  If your 2.4 GHz radio is busy and your client happens to be connected on 2.4 then that is normal. Having 150 Mbps speed on a wireless client is excellent throughput if you have multiple clients in that area.  If your application requires low latency and/or low jitter then you will need to check airtimes, QoS tagging on your wireless frames (by doing an OTA capture). ... View more

Yes - if for whatever reason it doesn't work then you can ring Meraki support for help. ... View more

Some Apple documents that might be of interest for some. https://support.apple.com/en-jo/guide/deployment/dep3b0448c58/1/web/1.0 <- See the AutoJoin section, for some "dbm" numbers.   https://support.apple.com/en-gb/guide/deployment/dep98f116c0f/web <- See the "Selection criteria for band, network and roam candidates" for some "trigger" values, how much better the new signal must be, and preference in wide channel, and "Wi-Fi generation" when roaming.     ... View more

It also only seemed to do it for a "short while" , and I could see all these clients on the summary page, with all the public IP addresses (but , as far as I can remember), with the MAC of the MX on all. But apparently they where all counted as a new client. It stopped, but I dont know how long it took, and apparently the dashboard kinda remembers that, its no biggie, but it now (until the time experies on that data) an "eye sore" or whatever its called 🙂 ... View more

Once "eBGP over non-Meraki site-to-site VPN connections" is configured on Hub MX, can those 3rd party prefixes/routes learned on MX Hub be propagated to other MX branches over Auto VPN?  ... View more