Some great solutions to easily enable secure remote working. Personally I don't believe working from home will become the new normal. Working from home seems a great idea on the surface however the strains of solitary working can take its toll on even the most introverted of us. I believe in many cases this period will allow people to appreciate the many advantages of having a dedicated working environment with face to face contact with our work mates.  ... View more

When re-booting the AP I notice that I get    VPN registry connectivity change vpn_type: teleworker, vap: 5, connectivity: true     but I do not get a VPN tunnel connectivity change Does this mean that the VPN tries to form but the tunnel is not completed?   Also will the APs try to form the tunnel to the Public or local IP address?  ... View more

Wow, thanks. I’ll give this a try on Monday. I’ll update the post with results! ... View more

@PhilipDAth How do I check this please?   ... View more

Hi   Thanks but unfortunately the reboot did not work. The SSID is still not visible. btw it's an MR45 on 25.14.   Any other ideas? I'm thinking I need to call support ... View more

Thanks, if this does need to be done via API, do you know of a helpful starters guide?     ... View more

Hi @PhilipDAth    It looks like I have I have the same issue as discussed in https://community.meraki.com/t5/Wireless-LAN/Windows-Radius-vs-Meraki-Radius-with-Win-7-Win-10-macOS-Machines/m-p/18630#M3127   There you suggest the Sentry Wi-Fi solution, however would this be not encrypted over the air?   Using EAP-TLS I get the same issue where the certificate is not accepted on the MacOS devices and user is prompted for login credentials.   Ideally we would like both MacOS and Windows devices on the same SSID, authentication by machine with no need to enter credentials each time.   Is there an accepted solution? ... View more

I am clearly not an apple expert! Sorry I failed to specify this is MacOS devices not iOS devices. I have now updated the post. Thanks for you help though! ... View more

Hi DensyoV   Thanks, that worked perfectly! The only issue I found was that when switching from one concentrator to another (in the SSID), the SSID was not visible to my windows 10 laptop, IOS devices just remembered the details and reconnected.    Is this a know issue?   Thanks again  ... View more

Would the SSIDs need to be on different VLANs to ensure separation when the traffic hits the MX84?   The Existing SSID is using the default VLAN 0.              ... View more

Thanks for the swift response, that's the info I was looking for! ... View more

Thanks, can you recommend a webinar or document which provides details on these options?  ... View more

Thanks cmr.    To clarify we only have a single MX84 in the data centre. The branch sites only have MRs.   Currently we are using a separate MX64 to tunnel the guest traffic.    Can we have both corporate and guest tunnelled to the MX84 but on different VLANs? ... View more

That make sense!   Thanks very much for your help   ... View more

The guest traffic is just required to access the Internet (nothing in the DC).   There is currently traffic shaping on the MRs to rate limit certain websites for the guest traffic   There is currently a second MX set up as a VPN concentrator. This is just used for the guest access. I suspect this was implemented to create a DMZ for the guest traffic.      ... View more

There is only 1 data centre and 11 branch sites. Some site have only 1 or 2 APs.   Would I need an MX at each site as indicated in the design?   One design goal is to isolate the guest traffic. I know this can be done at the AP but what is the best practice?  - An MX at each of the larger sites then combine the smaller sites with a shared MX?   ... View more

Looks good, Thanks   Can this design be simply scaled up for multiple branches? ... View more