HI @Izhar_Mohammed    Did you get any error when tried calling your local number? Also, as @BlakeRichardson pointed, please check if you have enough licenses available. You will not be able to register the device if there is no free licenses available.   Cheers!   Raj ... View more

Hi Jason,   Thanks for checking on this. I did some inquiry on this and it appears the API is still in development. As of now, it will not give you the actual version the device is running but will give you the result that you are seeing. It will only give you the firmware version when the network firmware version matches the device firmware version otherwise you will get the text saying it is not running the configured version   For now, please open a case with support to get the actual firmware version a device is currently running.   Cheers!   Raj ... View more

Hi All,   I just want to provide some updates on this one. There are no issues upgrading APs other than MR45/55s to 26.6 version. I tried upgrading my personal MR52 to 26.6 and it actually upgraded to and running 26.6.    If you want some clarity as to which version a particular AP is running, you can run this API call, this will give you the actual version of the device and not the network configured version.   https://dashboard.meraki.com/api_docs#list-the-devices-in-a-network   Cheers!   Raj ... View more

I just want to add to what @PhilipDAth already clarified. Our data centers are distributed geographically and are redundantly designed to provide disaster recovery in cases of emergency. Rest assured, you are in safe hands 🙂   Cheers!   Raj ... View more

Hi @JoRett    I did a little more research on this issue, Our developers' team are actively working on this issue, however, there are no updates available at this moment. I would suggest you open a case with Meraki support to track the progress of the issue and also to troubleshoot other stack problems you are seeing with the MS350 stack switches.   Cheers!   Raj       ... View more

Hello @AMITGILL    Unfortunately, there is no public-facing document available. However, you can always open a case with Meraki support to get this information. Please find the requested MTBF values below.   MX68: 174,600 MS210-24: 590,165 MS210-24P: 391,648 MS210-48: 439,585 MS210-48LP: 381,015 MS210-48FP: 320,555   Cheers!   Raj ... View more

Hi @NolanHerring , As @PhilipDAth already mentioned, this can be  bypassed by adding a backend feature by Meraki support. Please open a case and explain your situation and support will take care of the rest.   Cheers!   Raj ... View more

Hi @Limitless    I am sorry for your experience. Just to get some clarity over this issue, Did you able to open a case with Cisco Meraki support regarding this issue and received no response except the case closure? Can you please follow up on the case and re-open it? (You can do this by simply replying to the email you received from support). This might have happened by mistake, generally, our support team is very responsive and communicative. Also, please feel free to give the support team a call to discuss further (You can find the support hotline number on the dashboard under help > get help)   Cheers!   Raj ... View more

Hi @Geri0n    To answer your question, it is a yes and now. Is there a way to find the attempted traffic? Yes, can we apply a rule to allow this traffic, No, especially when it is L7 rules that are blocking the traffic.   If you want to know what flows are being generated at your restaurant, you can do this using Syslog. When you configure Syslog to report urls and flows, every HTTP get will generate a syslog message and also all the flows will be reported to the syslog server either.   Now the best way to block them to completely remove the L7 category which is blocking it (there is no way to bypass it for one specific Ip or url)   More information on Syslog reporting and L7 firewalls can be found in the below-attached documents:   https://documentation.meraki.com/zGeneral_Administration/Monitoring_and_Reporting/Syslog_Server_Overview_and_Configuration   https://documentation.meraki.com/zGeneral_Administration/Cross-Platform_Content/Layer_3_and_7_Firewall_Processing_Order#Traffic_Blocked_by_Layer_7_Rule   Cheers!   Raj ... View more

Hi @Farrukh    Some of the information in the JSON output you have provided is very sensitive, it is not a good idea to post it publicly as it could be used for malicious activity. Can you please mask out the serial number, network id, lat/lng of the device, please? This information is sensitive and it is always a good idea to protect them.   Cheers!   Raj ... View more

Hi @pbarbieri    Meraki employs an Out-of-band architecture which treats control plane and data plane traffic separately. That being said, when there are updates to AMP signatures, content filtering category updates, that might take a little of your uplink traffic (however, user traffic should have their own prioritization and shouldn't be affected as long os proper QOS policies are in place to identify and prioritize data).   These updates in themselves are very minimal in size and shouldn't take much of the bandwidth to cause a significant effect on the user traffic. That being said, you can control these list update intervals, under traffic shaping page, you can set them to renew either every hour, every day or every week. I hope this helps.   Here is a good read about Meraki's out-of-band architecture if you are interested. https://meraki.cisco.com/blog/2012/01/merakis-resilient-out-of-band-cloud-management/   Cheers!   Raj ... View more

Hello @NurIT-db    Is the device online and checking in? (You can check this information on the device page) and does the profile say it is installed on the device? Please refer to the following document to confirm if the activation lock has been enabled correctly.   https://documentation.meraki.com/SM/Monitoring_and_Reporting/Activation_Lock_for_iOS_Devices   If the issue still persists after checking those settings, I would suggest opening a case with Meraki support for further investigation.   Cheers! Raj ... View more

Hello @CArmstrong    Are you using VPP user assignment or device assignment to grant licenses? You can revoke the license from the users and make them available for other users from the dashboard. I am attaching a document here fo your reference.   https://documentation.meraki.com/SM/Apps_and_Software/Apple_Volume_Purchase_Program_(VPP)#Revoking_a_User's_App_License   Cheers! Raj ... View more

Hello All,   Just wanted to chime in and provide my point of view on this as many people are seeing this behavior in the dashboard.   This is definitely not related any latest firmware update or configuration change from Meraki side. The way the dashboard identifies the hostname hasn't been changed recently. It has always been the same. The preference order is, the name given manually on the dashboard > mDNS > NetBIOS > DHCP. So, if the client is generating an mDNS name for itself, that will be given priority over DHCP hostname.   One way to change this is to rename the client manually on the dashboard. However, if there are a large number of clients whose name needs to be changed, you can leverage this API call to rename the clients https://dashboard.meraki.com/api_docs#provisions-a-client-with-a-name-and-policy   Cheers!   Raj ... View more

Hi @JWill, Please contact your Meraki sales rep, hey should have information about product roadmap. We also encourage you to use the Meraki dashboard to "make a wish" and submit a feature request. You can submit a feature request at the bottom of any dashboard page.   Any wish that is made sends an email to our Product Managers and Development Teams. These wishes are taken into consideration and are used to help shape our product roadmaps. The most wished-for items are incorporated into product development.   https://meraki.cisco.com/blog/2013/10/make-a-wish/   Cheers!   Raj ... View more

Hi,   A complete, seamless failover will work if and when you are using both the ISP connections on both the uplinks on the MX. The way MPLS to VPN failover works, there might be some cases where the configured pinger will be pingable but the actual connection is failed down the line.    When you are using both the ISP connections on the two uplinks on the MX, you will get granular control with Meraki SD-WAN policies to control which traffic should go where and the failover will be seamless.   Cheers!   Raj ... View more

Hi @Slobs2, @NolanHerring We are truly sorry for all the inconvenience you are experiencing because of this issue. However, As Meraki support might have mentioned, this issue is being treated with a high priority on our side and our developers are working on it. While it is not an ideal solution, please use the workaround of changing the policy to keep the clients connected for now.   Thank you for your patience and we appreciate your cooperation.   Cheers!   Raj ... View more

Hi @Lagcat I was looking into the Auth error details and found this article in Cisco forums which is related to the auth error you are seeing. You can see the bug id in there.   https://community.cisco.com/t5/policy-and-access/ise-ad-authentication-stop-working-for-wireless/td-p/2363848   Cheers!   Raj ... View more

Hi @Lagcat    Do you have radius accounting enabled? If so you might be running into an ISE bug.    Can you try disabling accounting and see if you still see the same issue?   P.S: For security reasons, it will be a good idea to mask out sensitive information like Re-auth session IDs and all 🙂   Cheers!   Raj  ... View more

Hi @macsolutions  you would see something like the image below at non-Meraki VPN configuration section. That being said. I don't think it is completely ready for client VPN. But if you are looking for non-Meraki VPN, you should be able to negotiate your VPN via IKEv2       ... View more

Hi @couchbob  The splash bypass is MR only thing and wouldn't apply for the wired clients. unfortunately, you will not be able to leverage that option for wired clients. Whitelisting the clients is one way to make the wired clients bypass the splash page, but that will also bypass security checks like content filtering, layer 7 / Layer 3 firewall rules etc, It would be a trade-off at that point.   Although this feature is not available at this point in time, I highly encourage you to use the Meraki dashboard to "make a wish" and submit a feature request. You can submit a feature request at the bottom of any dashboard page.   Cheers!   Raj     ... View more

@sander_hudson Interesting to see this happening on multiple APs, Since this is happening frequently, If the APs are connected to Meraki switches, Can you take a packet capture on the switchport where the APs are connected and check what is happening between the AP and the gateway during that time?   You might want to use the APs mac address as the filter to avoid all other broadcast traffic from filling out the capture. Filter: ether host x<AP mac address>.   Also, I have seen similar instances happening when the APs are trying to upgrade their firmware and failing. Worth opening a case with Meraki support and confirm there are no issues with a firmware upgrade or something like that.   Cheers!   Raj ... View more

Hello @greaper ,   Sector Antennas are a bit difficult to mount but with proper mounting brackets, you can flush mount them to walls. It is hard to mount them without proper mounting gear, also not advisable, especially if it is an outdoor setup. Wind might come into play and change the antenna alignment.   Cheers!   Raj       ... View more

Congrats everyone. Thank you for being such a dedicated and valuable members of the community. Makes all the difference.     ... View more

Hi @jdavis721, as @Haydn told, Virus total is a pretty reliable site for a double verification so far in my experience. If you are seeing no malicious activity in there, It could very well be a false positive.    Cheers!   Raj ... View more