Hello community,   Context: I have a Meraki wireless network integrated with an Active Directory, using 802.1x authentication. Employees connect to the wireless network using their domain username and password. Employees connect a laptop and a cell phone provided by the company to this wireless network. However, employees also connect their cell phones, tablets, or other personal devices to this 802.1x network. (For network security reasons, these devices should not be connected.)   I considered 802.1x + MAC filtering, but it's not an option due to the large number of MAC addresses.   Is there any way to prevent personal devices from connecting to the 802.1x network, or are there any other alternatives? ... View more

  Hola,   Estoy configurando un SSID con MAC Filtering, de la siguiente manera.   Configure unnSSID con un PSK.     Configure reglas de Firewall & traffic shaping de la siguiente manera.     Configure un Group policies y la estoy aplicando a una MAC address que di de alta.     Todo aquellos equipos que la MAC address este dada de alta se conectan obtiene una IP y tienen slaida a internet.   Pero tengo una MAC address que no esta dada de alta mucho menos estoy aplicando el group policy y este equipo logra conectarse y obtener una IP, no tiene navegación mucho menos internet.   Pero quiero evitar que no obtenga una IP y que no se conecte para nada. Hay alguna manera de lograr esto ???           ... View more

  I am configuring an SSID with MAC Filtering, in the following way.   Configure an SSID with a PSK.       Configure Firewall rules & traffic shaping as follows.       Set up a Group policies and I am applying it to a MAC address that I registere.       All those devices whose MAC address is registered are connected, obtain an IP and have access to the Internet.   But I have a MAC address that is not registered, much less I am applying the group policy and this device manages to connect and obtain an IP, it does not have navigation, much less internet.   But I want to prevent it from not getting an IP and not connecting at all. Is there any way to achieve this??? ... View more

  I have the following connection but today I noticed the following log. I even lost service for approximately 1 minute or less.         peer_type gateway, peer: 10.52.20.2 connection_status: connected peer_type gateway, peer: 10.52.20.2 connection_status: disconnected   These logs are only seen in the MX, in the MS I don't see anything   Check the configuration of both ports on both the MX and the MS and they are identical.       ... View more

    Currently I implement a meraki LAN network (1 switch core 425 and 14 switch ccess 225).    My network works without problem, but I have a question;   How do I know when I have broadcast problems on my network? any Is there a configuration that avoids broadcast problems? ... View more

  Hello,   I am interested in receiving alerts via SMS I found this URL:   https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Alerts_and_Notifications#Receiving_Email_Alerts_via_SMS   Here it says that this is the AT&T syntax: phonenumber@txt.att.net I have added my number with the format to receive alerts but it has not been successful, Do I need something else????   ... View more

  We will have an infrastructure renovation. And the equipment that we will use will be MS 425-16 (core) and MS225-48 (access)   Scenario 1 The MS 425-16 (core) will be connected to the Firewall (Fortinet)   In total, 7 Firewall cables will be connected to the MS.   Namely: 1 cable will be for the (VLAN & SVI) of wifi guest. 1 cable will be for the LAN (VLAN & SVI) 1 cable will be for the (VLAN & SVI) of admin switches.   ....and so on   And also the MS 425 want it to be the DHCP   And it is intended to reach the following, as shown in the following image         I do not agree, because meraki does not allow me to assign an IP to a specific port. The ports can only be access or trunk but not L3.   Scenario 2 I have commented having only 1 cable from the MS to the Fortinet and creating a transport VLAN between these two devices and creating the different VLANs in the MS.   When creating it I will already have a default route from MS425 to the fortinet and in this way it will allow me to create my VLANs and also run the DHCP         the scenario is possible ??? is the scenario correct ???     ... View more

    I'm trying to delete a segment configured in the MX   Security and SD-WAN> Configure> Addressing and VLAN   But when selecting it, it shows me the following message   There were errors when saving this configuration: The IP address range 10.10.170.0/24 does not apply to any local subnet or configured VPN.   Where else should I save it? This segment is no longer used in any configuration ... View more