Am I blind, or is there no way to edit an existing user? Delete and readd? ... View more

That usually means the static ips or vlan for dhcp you've assigned them are not working properly.   Something has changed somewhere, without knowing more about your setup it's hard to say precisely. I'd check your DHCP server and make sure it's up for the relevant vlan or make sure some uplink somewhere hasn't been changed and a vlan not passing through. You can test using a laptop and see if it can get online using the settings you'd be using for the APs as well ... View more

https://learn.microsoft.com/en-us/windows-server/networking/technologies/nps/nps-radius-clients-configure#configure-radius-clients-by-ip-address-range-in-windows-server-2016-datacenter   That's all you should have to do, it's just a client with a subnet/ip range vs a single IP, and you reference that client in your policy ... View more

This survey  is about adding RBAC to the dashboard in general. While I can't speak to their plans, SAML already exists so I have to imagine it's on the to do list to have this work with that. If Samira can't answer, you may be able to get your Cisco account rep to provide more detail  under NDA. ... View more

I believe this means the AP became unreachable for the client, which could be because the client is moving around or some other form of interference. There could also be a software bug on the AP or the client's nic drivers, it's hard to know without more data. Meraki Support may be able to quickly identify something if you give them a ring. ... View more

I'm no dev but use postman a lot, although perhaps not quite the way you are.   Take a look here: https://developer.cisco.com/meraki/api-v1/update-network-wireless-ssid-bonjour-forwarding/ This site is great for figuring out issues with your JSON. You can use the gui form to build the JSON and see the formatting that needs to exist.   I will caution that the get output does not always match the put for API calls that otherwise seem to match up. There are sometimes added values in gets that don't get put in a put. Hopefully this helps steer you onto the right path   ... View more

In general this is because as you say the switches don't understand the data and are just forwarding it. You'd need to consult the documentation on the switches in question to see if there is a way to block it. In general it's just multicast to a destination mac of 01-00-0c-cc-cc-cc so if your switches are able to block that it should solve the issue.   Ref intro here: https://www.cisco.com/c/en/us/support/docs/network-management/discovery-protocol-cdp/118736-technote-cdp-00.html ... View more

Yes it does work, but it is degraded performance and doubly so by being only 100mbps, its definitely not recommended. You may disagree whether it's noteworthy as an alert status, but it's not inaccurate. ... View more

I would say they could possibly word it better for the models that support it vis-a-vis low power, but your best bet is to open a case or make a wish to draw visibility to it.   They've decided to move the info from something that's visible to an alert, probably to help decrease support cases as a result of those issues.  ... View more

So you haven't provided what the AP is reporting for speed-duplex or power, nor the exact model of the switch or the AP.    It appears for speed you may be only getting 100mbps? If so that would be a degraded uplink for any current AP models. Additionally if your switch is just a plain 2960 and not an X model it would only support 802.3af power, and current AP models need at least 802.3at. Even if you do have a 2960X, depending on PoE consumption you may not get the correct power amount and you may have to manually adjust your inline power commands. These alerts were somewhat recently added to call out these issues more prominently, so you may have had the problem for quite a while. ... View more

If that is the box you had to uncheck to make this work, you likely have some sort of certificate issue on the the tablet. What specifically is harder to tell. If you are using a custom or the auto generated, perhaps the right root is not installed or up to date on that tablet. If you are doing something self signed it would need to be present in the tablets roots.   There could be some other corner case issues, but you'd have to look at the logs on the device. ... View more

For the remote ID on the third party you  have the vMXs internal IP specified or whatever you've specified in the Local ID field? ... View more

I do not believe this exists in the API. I just looked through a number of API calls that might be relevant and did some test gets and don't see anything related to these settings. Curious also if Im missing something. ... View more

Can you clarify what you are trying to do? Connect your onsite wireless to Entra AD, AD DS, or an Azure VM running Windows Server?   A vMX will get you a Meraki SD-WAN connection into an Azure network, but only a Windows Server provides radius via NPS. Entra AD and AD DS do not offer any radius directly. ... View more

See here: https://documentation.meraki.com/General_Administration/Licensing/Subscription_-_Licensing_Overview#Network_to_Subscription_Binding From that paragraph: "A network can only be bound to one subscription at a time"   You will need to work with your Partner and Cisco AM to adjust the subscription OR split your networks. ... View more

The DDNS entry is not updating? or it's updating and not working? ... View more

Based on the documentation and the GUI, I don't believe that's possible. You could do that with the old school client vpn as split tunneling is a client side configuration. ... View more

The features are available. You may or may not  need them depending on your cloud setup. We use vMXs solely to create connectivity back to our sites and use other functionality in Azure for firewalling so we don't touch these settings.    It really depends on what exactly you are trying to do or are concerned about.        ... View more

The performance rating is based on the quality of client connections to the AP: https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Meraki_Health_Overview/Meraki_Health_-_MR_Access_Point_Details#AP_Performance_Tab   A lower number means some clients may not have a great connection. Whether you need to do anything or not really depends on what your end users are seeing. If users have poor connectivity it could be anything, device drivers, AP placement, interference, etc. A site survey could be in order. ... View more

Based on the screenshot the boot mode is Meraki already from the factory. If so you should have been given a Meraki serial (Cloud ID) in an order email that you can just add to the dashboard.  Conversion is only for if you buy them in IOS mode. ... View more

Correct ... View more

Are you routing your new client vpn subnet to the MXs from the old network? If things are working internally fine crossing VLANs that would be my suspicion from a network configuration standpoint. If you have that and it's still not working its possible the active default gateway on the old subnet or the server itself have firewall rules not allowing the traffic ... View more

If you do full tunneling on your client or anyconnect vpn it should work. If you do split tunneling this scenario is not supported by Meraki directly. It will only work if you have another firewall to route this traffic out of and thus could include the relevant static route in the client vpn. ... View more