I spoke to the Meraki help desk but unfortunately, I was not given a satisfactory answer. I was just told that this is not to be concerned about.    More importantly though: I have noticed that the issue has been resolved. The issue appeared to be caused by APs that people were walking past but not being used. Therefore the association process was not being completed. ... View more

Unfortunately, I cannot do this due to it being a live network. I do see the same issue with the WAP2 PSK network (albeit a lot lees frequent as most people use the OWE network)   ... View more

The PSK is WPA2. 802.11r is disabled on both ... View more

Thanks but unfortunately, these failure messages are not listed ... View more

Some great solutions to easily enable secure remote working. Personally I don't believe working from home will become the new normal. Working from home seems a great idea on the surface however the strains of solitary working can take its toll on even the most introverted of us. I believe in many cases this period will allow people to appreciate the many advantages of having a dedicated working environment with face to face contact with our work mates.  ... View more

Hi @PhilipDAth    It looks like I have I have the same issue as discussed in https://community.meraki.com/t5/Wireless-LAN/Windows-Radius-vs-Meraki-Radius-with-Win-7-Win-10-macOS-Machines/m-p/18630#M3127   There you suggest the Sentry Wi-Fi solution, however would this be not encrypted over the air?   Using EAP-TLS I get the same issue where the certificate is not accepted on the MacOS devices and user is prompted for login credentials.   Ideally we would like both MacOS and Windows devices on the same SSID, authentication by machine with no need to enter credentials each time.   Is there an accepted solution? ... View more

I am clearly not an apple expert! Sorry I failed to specify this is MacOS devices not iOS devices. I have now updated the post. Thanks for you help though! ... View more

Hi DensyoV   Thanks, that worked perfectly! The only issue I found was that when switching from one concentrator to another (in the SSID), the SSID was not visible to my windows 10 laptop, IOS devices just remembered the details and reconnected.    Is this a know issue?   Thanks again  ... View more

Would the SSIDs need to be on different VLANs to ensure separation when the traffic hits the MX84?   The Existing SSID is using the default VLAN 0.              ... View more

Thanks for the swift response, that's the info I was looking for! ... View more

Thanks, can you recommend a webinar or document which provides details on these options?  ... View more

Thanks cmr.    To clarify we only have a single MX84 in the data centre. The branch sites only have MRs.   Currently we are using a separate MX64 to tunnel the guest traffic.    Can we have both corporate and guest tunnelled to the MX84 but on different VLANs? ... View more

That make sense!   Thanks very much for your help   ... View more

The guest traffic is just required to access the Internet (nothing in the DC).   There is currently traffic shaping on the MRs to rate limit certain websites for the guest traffic   There is currently a second MX set up as a VPN concentrator. This is just used for the guest access. I suspect this was implemented to create a DMZ for the guest traffic.      ... View more

There is only 1 data centre and 11 branch sites. Some site have only 1 or 2 APs.   Would I need an MX at each site as indicated in the design?   One design goal is to isolate the guest traffic. I know this can be done at the AP but what is the best practice?  - An MX at each of the larger sites then combine the smaller sites with a shared MX?   ... View more

Looks good, Thanks   Can this design be simply scaled up for multiple branches? ... View more

Thank you all for the solutions. Very much appreciated! ... View more