Meraki

MauroF

Why dont you fix the mac address for every single device and do a MAB with a Group Policy?

MauroF

Hi, Let’s say I have 9 MX appliances and 9 licenses, everything is fine. But what happens if I add one more MX with a trial license, and that trial expires? Since I know licenses are not tied to specific devices, how is this situation handled? What device will stop processing traffic? Dr.

MauroF · ‎Aug 11 2025

Thanks for your time to answer.Really helpful. Just one clarification: i can leave all my spokes in split-tunnel (enabling the vlans on vpn) without problem,correct?

MauroF · ‎Aug 11 2025

Hello, I have a vMX (in VPN Concentrator mode) acting as the HUB on Azure, with multiple sites configured as spokes (a classic HUB-SPOKE Meraki SD-WAN architecture). I’m considering switching the vMX to Routed mode so that traffic from my Azure services would exit through the vMX instead of Azure by default. I’d like to clarify a few points. Among the main ones: 1. If I switch the vMX to Routed mode, will my spoke sites traffic become full-tunnel or will it remain split-tunnel for internet-bound traffic? Mick 2. Is NAT performed by the vMX applied on the WAN or on the LAN interface? 3. With this change, will clients in my spoke sites still be able to communicate seamlessly with my Azure servers, or could NAT introduce issues? Any advice would be appreciated. Thanks.

MauroF · ‎Jul 30 2025

SOLVED: if you switch to the NEW VERSION PAGE of the Access-control section..it's present.

MauroF · ‎Jul 30 2025

Hi, I'm trying to configure Wi-Fi authentication directly with Entra ID under the SSID settings. However, I’ve noticed that the option is available in one organization but not in another. Could you help me understand why this discrepancy exists? My org: Another Org i have a MR enterprise licence in both Organization and i dont see anything in the procedure: https://documentation.meraki.com/MR/Encryption_and_Authentication/Microsoft_Entra_ID_Integration_with_Splash_page Thanks in advance. M

MauroF · ‎Jul 7 2025

".. when a user connects to your WiFi with the appropriate SSID configuration" but there is no sign of the SSID configuration i should match on Entra-Id. Are your sure about that? if yes ,where should i insert that detail? i doubt its that detail thou.

MauroF · ‎Jul 7 2025

The first link is the one i found on internet and its recently new. What i dont understand is, in that in the documenti dont understsand the association between my Meraki and Entra-ID.. I mean where i say to my meraki to go to my entra-id or from my entra-id to get info from my meraki? This is the question.

MauroF · ‎Jul 7 2025

HI there, what you sent me is a integration with System Manager which has a different procedure. Thanks anyway.

MauroF · ‎Jul 7 2025

Hi all, I saw that there is finally native support for Entra ID authentication over Wi-Fi ,great news! However, I’m still not sure how to actually link Meraki with Entra ID. I found some documentation on how to configure the SSID, but I couldn't find where the Entra ID connection to Meraki is set up. Did I miss something? Thanks, Greg

MauroF · ‎Jun 17 2025

Hi, I’ve initiated an RMA for a Meraki access point, and the replacement unit should arrive in the next few days. Could you please clarify how the return process for the faulty unit works? - Will I receive a return label with the replacement unit? - Do I need to arrange the return shipment myself, or is a courier pickup included? - should i use the new box to send back the damage part? Thanks in advance for your support. Best regards, DW

MauroF · ‎Jun 12 2025

Thanks for your reply. The real issue is: how can I allow a guest to authenticate via email if their mail provider is not included in the Walled Garden? Is there a solution to grant the guest temporary full internet access , for example, for 5 minutes , so they can check their email, regardless of the provider (not just Gmail, Hotmail, etc.)? Cause now im using protonmail as a reference but could be also John@whatever-mail.com

MauroF · ‎Jun 12 2025

MauroF · ‎Jun 12 2025

when i connect to the wifi: -splash page of spash access pops in -i type, name,surname and email address -then i check the email to click the link to get connected. The question is: how can i reach protonmail.com if that site is not in the Walled garden?

MauroF · ‎Jun 11 2025

I did set the Captive Portal Strength. Set this to Block all access until sign-on is complete

MauroF · ‎Jun 11 2025

Hi, I've just created an Guest SSID and integrated it with Splash Access. While testing the authentication using my @protonmail.com email address, I was able to log in successfully. However, I'm wondering: how is it possible that I can reach the ProtonMail service, even though this domain is not listed in the Walled Garden settings suggested by Splash Access? This raises a question: what is the actual role and behavior of the Walled Garden in this setup? Thanks M

MauroF · ‎Jun 6 2025

Such good suggestion!

MauroF · ‎Jun 6 2025

Hi all, I aim to implement a Guest Wi-Fi authentication system for my hotel with an intuitive auto-onboarding process. A QR code is one option, but I'm open to innovative alternatives. This would be needed for Mobile and laptops. I'm currently evaluating Splash-Access and want to explore other solutions to ensure a simple, visually appealing user on-boarding experience. PS: i dont use Meraki splash page. Thanks in Advance M.

MauroF · ‎Jun 6 2025

At the moment you can authenticate ONLY with Azure. Future will tell f they will add some ore identity Provider.

MauroF · ‎May 28 2025

ah ok. Can i ask then which other authentication methods are accepted to use only one SSID with EntraID and MAB together?

MauroF · ‎May 28 2025

Hi, Ryan who work for Meraki said: "You will need two SSIDs: one for MAB and a second for 802.1X." mmm

MauroF · ‎May 28 2025

ah ok...ive been told differentty here above but it seems like you are a meraki Employee so...well thanks for your help

MauroF · ‎May 28 2025

Hi Ryan, first of all thanks for your help. you say that SSID needs to be configured for MAB and Access Manager but if i set up the SSID for MAB...how can i authenticate on the same SSID my users againstEntra ID? At the moment my SSID is configured with "ENTERPRISE with ACCESS MANAGER". With this config i can authenticate my user against EntraID but not MAB. is that correct?

MauroF · ‎May 28 2025

This is my configuration....but when i connect to the SSID ,it asks me for username/password.Why? This is also my SSID config: any idea?

MauroF · ‎May 28 2025

Hi, I'm currently testing Access Manager and it's looking great! I just have a couple of questions: Is it possible to use the same SSID to authenticate both via Entra ID and MAB (based on MAC addresses assigned to a Client-group object in Access Manager)? Besides Entra ID, can I integrate other Identity Providers such as Google? Thanks in advance for your support! Mau

About MauroF

MauroF

Greg

Community Record

Badges