(From a distant place) Currently, my Internet connection is over 5G "Mobile broadband". There is a lot to like about it, but, many ISPs use CGNAT, (for reasons of unplanning and economy), this causes high latency, fortunately, I don't play computer games where this matters. Apparently it makes many online games unplayable, without some "jiggling around". Predictably, ISPs that use CGNAT are in denial. Allegedly the problem doesn't exist if the WAN interface can be configured to use IPv6 whilst leaving the LAN side IPv4. ... View more

Hello all, I have the same problem and on acces control page when i select Meraki AP assigned (NAT mode) mode and gave the correct dns the macbook connected and used the internet clearly. ... View more

An API call can be used to generate this information   I have written a application using the API calls to get client connected to SSID, this data is written to a back end SQL database and then Power BI reports to display results. The reports are live so can go back in time to get a snapshot of how clients connected to a given network on a given AP and SSID ... View more

@DACITServices have you tried forcing the speed as per @SoCalRacer's suggestion above.  I know it isn't clean, but it often works... 😈 ... View more

For your information.   I contacted Meraki Technical Support because I could not see the documentation. The HTTPS Inspection document has been intentionally de-published.   There are the following reasons.   HTTPS Inspection is BETA version and the specifications are subject to change at any time. HTTP Inspection could lead to a significant impact on existing functionality and network stability.   In addition, the public release of the document was cancelled due to the high risk involved in operating the system for general users.   I contacted support in Japanese, so the nuances may be slightly different when translated into English.   In my opinion, I don't consider it a serious matter because there are ways to offload to Cisco Umbrella. ... View more

There no "override" for Geo IP blocking, so strictly speaking you can't ... View more

just saw this discussion, sadly I had no luck with my MX68 and also not with the Z3 ... 😞 ... View more

With  version 28.5 everything runs fine in our networks (running with MR42, MR52, MR46, MR44 ...) ... View more

Just wanted to reference to this "UserVoice" idea which is that Intune should support configuring VPN w. L2TP-PSK / PAP; https://microsoftintune.uservoice.com/forums/291681-ideas/suggestions/41712955-enhanced-l2tp-configuration-profiles-for-windows Please upvote that if you are using Intune and want to easier be able to manage MerakiVPN. ... View more

Was just researching this exact question...  I think...   So if I have a VLAN and corresponding SSID set up for the management of my Sonos speakers and I want to be able to get on that SSID/VLAN comb from out of town and run the firmware update on my speakers, VPN wont let me do that, is that right? Like I couldn't use the VPN to act like Im on that SSID.... right?  ... View more

Great point BrechtSchamp. /24 subnets were allowed during initial setup but I should setup the servers addresses only.   ... View more

  "It seemed like a good idea at the time" ... View more

I had the same issue and disable RSTP and RSTP Guard resolved it.    I had a remote switch connected through an ISP provided L2 circuit, managed by their Cisco switch.  Uplink was up/down frequently.  Disabling RSTP on the remote switch's Uplink port stabilized things.  Should I also disbale RSTP on the core-side switch port? ... View more

Hey AlexG - I hope you are doing great! What USB modem are you using ? I am curious about the overall experience with the USB fail over you described.    Check out the Skyus SC line - this should remove some of your challenges you have been facing    https://www.inseego.com/iot-modems/   ... View more

@Phelzier I don't know what changed, but it started working for my users one evening and they haven't had an issue since. ... View more

You'll need to enable ping under appliances services. https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Firewall_Settings#Appliance_Services ... View more

Hi SELBYCA,   Thanks for your input.   Please see my current working config EX2300 v3 and a config from an EX2200 v1 which is doing the same role. With regards to the EX2200 config, it is patched to an interface on a Fortigate Firewall with the main interface being the WirelessDMZ, then all the other subnets are subinterfaces and configured as vlans.   The EX2200 is works as intended with the default untagged vlan being the WirelessDMZ and all the other vlans tagged.   The EX2200 in this instance is the core switch with three other WirelessDMZ switches uplinking to it. When an "AP" is patched to a trunk port, it receives an IP address from the WirelessDMZ range, which is the management vlan, then each SSID with issue an ip from any other the tagged vlans depending on what vlan id the ssid has.   I have tried to replicate the config in the EX2300 as in the EX2200, but I suppose that dealing with different switches and different firewalls, you don't always get the result you want, unless I'm missing something. ... View more

Also you can't configure IPSec vpn  between two MX if the WAN ports have private IPs. The MX will not negotiate IPSec unless the port has internet connection, the port status will show failure until it gets internet connection. Hence, if you have two sites connected via MPLS then you can't have VPN between them since the WAN ports don't have internet connection. ... View more

Despite changing the default VLAN to 2, this hasn't solved this problem as I just got another alert. I have now raised a case with Meraki support, who were equally as stumped. Because the Unifi switch is blocking the DHCP request, the MX isn't reporting anything helpful in the Event Log. A case has been created and I will watch for the next alert to try to establish activity around that time (clients arriving, joining the network, leaving, new devices plugged in, etc).   I have also turned on remote syslogging for the Unifi switch, so this will hopefully help identify what is happening. I'll update this topic when I have more to share. ... View more

@BrechtSchamp    I always have a dedicated VLAN for my access points so I'm assuming that his possible solution is on by default in my situation. My ports are trunked, with the SSID vlans allowed, and the management vlan as well. the management vlan is native vlan on my trunk ports so access points reside on that vlan.  Makes no difference either way when I tested it. ... View more

@GOwens I suggest taking a look at some of the great documentation to help you troubleshoot and isolate your particular setup. Some suggested docs:   https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Configuring_Active_Directory_with_MX_Security_Appliances   https://documentation.meraki.com/MX/Client_VPN/Client_VPN_Overview ... View more

Before you start working with the USB issues, I would make sure this device has been connected with a WAN connection and has firmware updates. ... View more

I am only concerned about the information, whether it is a mistake of the platform or why it happens to better understand the function of it. ... View more

It would be nice if it would actually power off, however I do not think that is something that is possible. Closest I know to getting to actually 'OFF' is to either set the radio to OFF under the power settings manually (or doing it through the RF Profile method which always seems difficult for some reason), and then contacting Meraki support to have them give you the toggle option under General settings, to disable MESHING. You shouldn't 'see' any wireless frames then going across the air, however I believe you'll still see the AutoRF changing channels. You can ignore the TX power setting the 2.4GHz radio 'grabs' because its never the same for me. One AP might show 29dBm, another might show 6dBm, both set to OFF. I just ignore it and move on. ... View more