>What is the best way to securely connect the MS-130-8 to the Meraki dashboard without using a public IP address?   Personally, I'd give it a static public IP address and have no connection to the internal network.  I would also disable the local status page.   In addition to what others have mentioned, if the swtch can only connect to the Meraki cloud via an internal path that ultimately connects through itself, and you have a mis-configuration, you wont be able to fix it via the Meraki cloud as it will have cut its own in-direct access off. If it can connect to the Meraki cloud directly then there is no risk of human error bringing everything down. ... View more

Case opened in 2022-12-08 and closed in 2024-01-26 :   Hi Raphael, Yes the behavior you are describing has been confirmed by our internal teams (and they've mentioned that this is how this change has been implemented). After they made the change any new networks will not be able to have both CoA and the 802.11r selected.  Any networks that existed with the CoA and 802.11r enabled (before the change was pushed by our internal reams), will still show the option as being available. If you had CoA and 11r enabled even if you turned toggled them it would still let you keep them both on (for old networks).  I will confirm if there is a way to disable 802.11r in old networks that have both 802.11r and CoA selected           ##### A second note later :   Hi Raphael, I've checked the changes for the 'redacted' network with our development.  Just to clarify all of this a bit more, for and old networks, the validation check will not stop you from enabling 802.11r and then CoA, since it checks past config pushes and see that this was a valid config. This is not an issue for new networks (they will be greyed out and blocked).  What this means is that the actual config will still not get pushed on old networks, when you try enabling CoA, after 802.11r has been enabled (this might not be reflected there visually on old networks but config wise enabling CoA will disable 802.11r).       ... View more

Thank you for sharing this is interesting about the noise level. ... View more

Thank you, I have reached out to our internal teams. I will let you know when I have an update on your network.  ... View more

https://documentation.meraki.com/MR/Other_Topics/SSID_Availability   https://documentation.meraki.com/MS/Access_Control/Port_Schedules   ... View more

Yes - we will be going into final testing and expected release this coming fiscal quarter. ... View more

Unfortunately, I cannot do this due to it being a live network. I do see the same issue with the WAP2 PSK network (albeit a lot lees frequent as most people use the OWE network)   ... View more

UPDATE: This contest is now closed. Thank you to everyone who shared their goals for the new year with us! Congratulations to our 3 randomly selected winners: @Pond @Brian21 and @Viewmax!!! 🎉 ... View more

Here we go:    https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/SSID_Tunneling_and_Layer_3_Roaming_-_VPN_Concentration_Configuration_Guide ... View more

That warning is nebulous. I had zero issue installing them directly into a prod network that contains  MT40 and MT15 sensors during the Beta  ... View more

Yes this port is an alternate port. This means you will be having inbound BPDU's. If you want to check where the BPDU's are coming from you can do a packet capture on the port filtering for: ether host 01:80:c2:00:00:00 and let it run for 30 seconds so you can gather all BPDU's. The bridge ID of the incoming BPDU should give you a clue from what the device the frame is coming from. ... View more

I generally agree that this is a best practice. However, with tuned basic rates, the overhead of some more SSIDs is typically tolerable if functionality can be improved. ... View more

Forwarding is typically always done when the ports are switch ports. But with a firewall that uses routed ports (like most ASA/Firepower by default), the BPDUs are dropped. ... View more

To pass the 500-220 exam, focus on understanding key concepts from the study guide rather than memorizing every word. Utilize Cisco 500-220 free practice questions like Study4Exam to identify gaps in knowledge. Explore official Cisco resources, forums, and exam-specific communities for extra material. Practice extensively in your live environment, emphasizing troubleshooting and real-world scenarios. Analyze your past attempts to target weak areas. Stay confident—your preparation will pay off! With focused preparation and determination, you can succeed on your final attempt! @Jackijj    ... View more

GUI based backup! ... View more

For all those topics and anything else RF related I highly recommend CWNP's training. I started with the CWT, now called the CWTS, and then studied for and passed the CWNA, CWDP, CWDP, and CWISA all in the last year. It has made a significant difference in my career, and I enjoyed every second while studying for it. I'm hoping to become a CWNE within the next year or two. If you have any questions about it, feel free to message me. ... View more

Note the Google form has now been closed and says: Meraki Community: CMSS Badge Request We are no longer accepting CMSS badge requests on this form. If you have completed CMSS and would like a CMSS badge on your Meraki Community profile, please email our helpdesk at community-help@meraki.net. In your email, include: - your CMSS certificate - the email address used on your community account - your community display name Thank you! ... View more

I think we are all waiting for the native tunnel to be used for monitoring as well 🙂 Then things will get better ... right ? 🙂 I mean the command is kinda already there - if anyone has tried and been to impatient with waiting for the switch to reset when adding it do a network using the "cloud native" IOS-XE versions. test platform software config mode managed <- starts the conversion to "meraki mode" with the new software. But : test platform software config mode ? - tells you that there are options for "monitored" and I seem to remember the last one was called "catalyst" , Im guessing that last one is what Meraki supports sends to the switch in order to revert it back to "catalyst persona". ... View more

https://documentation.meraki.com/MR/Wi-Fi_Basics_and_Best_Practices/Configuring_Simple_Guest_and_Internal_Wireless_Networks   ... View more

I disagree that clients on the same SSID will all see the same BC/MC traffic, regardless of the VLAN they’re assigned to. That’s broken. If I assign a client to a particular VLAN they should see link local multicast from only that VLAN.   I decided to test iPSK as a substitute for group-policy assigned VLANs applied directly to clients. This feature works correctly. A client connecting with the PSK for VLAN 105 gets traffic from only VLAN 105. A client connecting with the PSK for VLAN 100 gets traffic only from VLAN 100. There’s no leakage of BC/MC traffic when using iPSK. Only when using client-specific group-policy assigned VLAN tags.   I thought the multicast to unicast conversion feature might be contributing to this, but it didn’t change the behavior. The MR44 is still leaking link-local multicast across VLANs to clients with VLAN tags assigned via group policy.   To confirm I didn’t have something wonky going on that I wasn’t aware of I created a completely new group policy that assigned VLAN 999. VLAN 999 doesn’t exist in my network, anywhere. It’s not trunked on any ports, and there are no devices in that VLAN. Theoretically a client assigned to VLAN 999 using a group policy shouldn’t see any traffic beyond what the client itself generates. In reality though the client still saw all the link local multicast traffic generated in the default VLAN assigned to the SSID.   This feature is broken, and it’s especially bad from an IPv6 perspective given how much of the protocol is based on link-local multicast and ICMPv6. Leaking that beyond VLAN boundaries breaks a lot of things. ... View more

Thanks everyone for the input. I believe this is the direction we're going. It will be at least a few days before we begin moving forward with this. So if anyone still has an opinion let me know.  ... View more

+1 for solid waste storm 🤣🤣 ... View more

It worked, the firewall rules were wrong ... View more

There you go  :https://developer.cisco.com/meraki/api-v1/get-organization-summary-top-appliances-by-utilization/   Description is bugged. You can filter on top X appliances not only top 10. ... View more