Yes this is expected behaviour, traffic is bridged to the lan port of the AP tagged with the VLAN, if that does not exist it cannot reach its gateway so no traffic will be possible. After a while the client does a DHCP renew and then it works again.   Do you need different vlan per building due to size or links between? If not make it in 1 VLAN, if yes use layer3 roaming or use a MX as a WiFi concentrator. ... View more

Just to be clear, you mean that under Wireless - Access control at VLAN tagging you have tagged the AP per building and specified the VLAN ID to be used by building? In this case the VLAN for the SSID has to be present on the switch port. So that means if the users roams he needs to have his IP renewed to the new VLAN, did you test that, what happens if you move around (I never used this feature) Solution is you have to turn on Layer 3 roaming under the External DHCP - Bridged option. Maybe try that one. If you have an MX you could also go to tunnelled mode instead of bridged.  ... View more

Otherwise do a visual check, on the AP reporting it at 40 dB, the interfering device must be very close to that one. Like a couple of meters probably. Could be anything like an AP, provider router, end-user 4G hotspot, some kind of smart device/tv. Or download the free netspot on your laptop (assuming you do not have access to a professional survey tool like Ekahau), go to the area and walk around to see where that signal is the loudest, you must be able to find it. ... View more

Hi NYMetsFan, under network-wide - general, what country/region/reg.domain is your network set to.This determines how loud your AP can go on power settings. Then my quick check about signal would be, when users are connected, go to the AP under Wireless, look at the current clients connected, and check their signal strength. If there are users under 20dB than most of the time you need more than 1 AP to cover the area. As said, floorpans would help. There is only so much you can configure to adjust RF coverage, and turning up the AP most of the time does not help (as it is the client that is the limiting factor). ... View more

Hmm just a thought: why do you need to do addressing planning of the guest wifi that has no authentication, do you provide any local IP connectivity or they only need to access Internet? Why not simply use Meraki AP NAT mode? ... View more

Yes well it says it's a Aruba, so it looks like you have more than 1 Aruba AP active on your LAN (multiple BrC-MAC, seen of lots of channels). You share the LAN in the building? ... View more

Yeah check DHCP config, DNS server and FW settings (in wifi part and in MX part), it looks like your wifi connects but your IP traffic gets blocked. Does this SSID work for other devices. What authentication do you use on the SSID? ... View more

In my experience the "association and authentication errors" are probably caused by clients that try to connect while having a very low connection signal, therefore losing packets. With only 1 AP, the question would be what is the office layout, how many rooms etc. Also, what Reg. Domain is your network set to, as this may impact the signal level the AP is maxed out on. But: even on Europe with max power being the lowest, mostly the bad connection is due to Clients not being able to reach the AP, so turning the AP to the max (what happens if you use one of the default profiles) will not help. As you have only 1 AP, there is no option to tune the RF to get a good distribution. So for one AP: - Verify in wifi profile if channel and power is auto - Check RF interference in the RF menu, change the channel on 2.4 Ghz if this is the case - Check if 5 Ghz is enabled in RF Profile - In the profile disable the speeds below 12 Mbits - Share a floorplan for more advice. Because good RF planning starts with that. ... View more