For you to be able to delete via API, as far as I remember, the user has to be active, so you can delete it. So in your script you will first have to enable the user and then be able to delete it. ... View more

What error message do you get deleting a non-authorised user? ... View more

Going sideways, you can see other ways of powering it at the bottom of this page: https://meraki.cisco.com/product/cellular/external-antenna/mg21e/     ... View more

Use this API and set "delete" to true: https://developer.cisco.com/meraki/api-v1/delete-network-meraki-auth-user/    ... View more

This would be good to know for sure. Transferring passwords as cleartext will be too insecure IMO.  ... View more

I tried that it didn't work. Interestingly you can delete a using Postman with the delete keyword. I have raised a TAC case and they it can't be done and that an internal case is being raise to amend their documentation ... View more

I have literally just worked that out for myself. I have spent hours on this. Grrrrr. Thank you for you confirmation ... View more

At your scale, you would have a Meraki Account manager.  I would engage with them and ask for an engineering resource (they could probably get a pre-sales engineer to help).  Seek advice from them. ... View more

Thanks for all the input !! ... View more

No client balancing enabled. ... View more

>The interesting thing is this that this only occurs on eap-tls   Perhaps they haven't been configured to trust the root CA certficate. Perhaps they require a minimum of a SHA2 signed root CA certificate and it is only SHA1 signed.   >what message would be sent after a radius accept message  as I would expect that to be final message   Hard to say.  Could be COA.  Could be an additional or secondary challenge.  Need to check client log to see what it is saying. ... View more

If it is returning SSIDs it implies that at some time in the past someone created them, maybe these  networks were created by cloning another network that had SSIDs.   I'd assume both API and Dashboard are correct, just showing a different view of the same underlying state.   SSIDs/other settings can exist even if there are no APs, that's desirable/correct behaviour, the API would be correct to return them.   Maybe Dashboard is reducing screen clutter by hiding the wireless details from you because there are no APs.   My guess is if you added an AP then Dashboard would show you the same SSIDs that the API is telling you are there - this is quick and easy to check if you have an unallocated AP, just add it to the network and see what happens, you don't need to plug in the AP, just add it logically, do the check, then remove it.   ... View more

I am working on this for a customer using the Sponsored Guest Portal. When the user connects to the AP ISE redirects them to Azure AD and ISE reports them as authenticated. The user gets a browser window with a message to click the continue button . On doing so they get an error 500 message. we are running ISE3.1on a single box in AWS as PoC. ... View more

Or it could be that you get a maximum session of 24 hours from the carrier and the MG then establishes a new one?  The time seems to slip each day.  Try disconnecting it in the middle of the morning and see if the blips move to repeat at that time. ... View more

Upgraded my MG21 from 1.9 to 1.11 dashboard says everything is OK but the status LED continues flashing white 15 minutes after the upgrade.  I would have expected it to go solid purple. Is that your experience ... View more

Hi I have similar issue on firmware 1.9 did the upgrade to 1.11 fix the issue.  ... View more

Hi thanks for the response but my need is for an AUP on the Sponsor Guest Login Page. Hence the question can I use the redirect url at the foot of the Splash page so send them to the Sponsor Portal. ... View more

If you're intending to provision the MX over cellular, beware of this: "When bringing the units online for the very first time, MX67C/68CW units should be connected via a wired WAN interface to the Meraki Dashboard to retrieve an update to allow for proper use of the integrated cellular connectivity." - MX67 and MX68 Datasheet - Cisco Meraki Out of box MXs may not have stable cellular drivers, requiring Internet access over WAN to download latest firmware. Indeed, for whatever reason, Meraki has lately been encouraging the use of their own MG cellular modems connected via MX WAN ports, rather than their legacy cellular solutions.   Regarding 3rd party VPN over cellular, if you control the cellular network, can provide static IP addressing and manage and limit NAT-ing as much as possible then you should be able to get it working. However, this is an edge case design (I can't find anything in the documentation) so you'll be on the bleeding edge of finding any stability/reliability bugs.     ... View more

Hey folks,   If you haven't already, I'd ask to raise a case with the Support Team. If 15.43 is causing this type of problems, we surely want to gather enough data to create a report for the developers so that it doesn't impact subsequent releases.    For VPNs in particular it's always good to grab packet captures on the Internet interfaces of the MX(s) and attach them to the cases along with timestamps so we can check logs in the backend.  Would also be interesting to see if the issues are with MXs that are directly public facing or behind NAT.    Many thanks! Giac ... View more

Yes - the trick is, there is no configuration. ... View more