Meraki

ww

I think 18dbm is the max for a 4x4 AP with beamforming on the UNII-1/2 channels. So if this is calculated with the auto setting it looks like you might need more AP's. To be sure you could do a site-survey. Were your mr33 also on 18dbm or higher? The mr33 was 2x2 and was probably going to max 21 dbm. Maybe that somehow just did work better for your environment.

ww

Looks like its keeping the previous multi vlan settings in the dashboard/backend. Could you try enable multiple vlan and remove those vlans/static routes first.

ww

Works fine here.(in a stack of 2) Check if the ports have the same config before aggregating

ww

Maybe you could use group policies and attach it to a vlan. Group policy fw rules are stateless like acl's.

ww

It is for phones with integrated switch. You could connect a client behind the phone. https://documentation.meraki.com/MS/Port_and_VLAN_Configuration/Configuring_the_MS_Access_Switch_for_Standard_VoIP_Deployments

ww

Did not test it. But at organization alerts you can configure a alert to send a mail or webhook for this alert "Port not forwarding traffic due to access policy" https://community.meraki.com/t5/Switching/Port-not-forwarding-traffic-due-to-access-policy/m-p/250292

ww

So vlan 1 client can ping to vlan 3 client. But at the same time vlan2 client cant ping vlan 3 client? Check if something is blocked if you filter on the vlan 3 client. And ping from vlan2 to vlan 3 https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Firewall_Logging

ww

Does the destination client allow ping. For example:By default a windows pc cant be pinged. Can they ping eachother when you put them both in the same vlan?

ww

Did you try using the fw log tool. Filter on the client and start the update or whatever you are testing. It could indicate what rules are blocking what traffic. https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Firewall_Logging

ww · ‎Oct 12 2025

https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/Throughput_test_to_the_Cisco_Meraki_Dashboard " It is not meant to accurately test the speed an Internet/WAN link is capable of. " "In order to leverage the full performance of a device, multiple sessions must be leveraged. This is best done by an endpoint or client, as the dashboard throughput tool creates a single session."

ww · ‎Oct 11 2025

Hello Is the ssid enabled status:enabled? Does the ap report config up to date? On the radio settings what bands are assigned? Is it the ssid using local lan/breakout?

ww · ‎Oct 9 2025

Not what you asking for. But, You could send guest traffic to a concentrator and break out there. Or send just vendor specific traffic to a one armed concentrator and break out there

ww · ‎Oct 8 2025

Also check the " show details" on the client page. It should give you info on what rules are currently used

ww · ‎Oct 7 2025

I do see the same behavior. its somewhat confusing, because for example a mx does report its actual running firmware

ww · ‎Oct 6 2025

Should be possible. But not from https websites without using ssl decryption.

ww · ‎Oct 6 2025

In addition to above. In 19.x it should be possible when you are able to run bgp. https://documentation.meraki.com/MX/Site-to-site_VPN/BGP_routing_over_IPsec_VPN

ww · ‎Sep 30 2025

https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-site_VPN_Firewall_Rule_Behavior#:~:text=to%20start%20training.-,Creating%20Firewall%20Rules,settings%20section%20of%20the%20page.&text=Select%20Save%20changes. You would need rules like: Allow A-B (you could combine two rules AB-BA) Allow B-A Allow C-D Allow D-C Deny any Or Deny AB -CD Deny CD - AB Allow any

ww · ‎Sep 29 2025

This route can only be used by branche/spokes that have the vlan/subnet enabled for vpn. Also note that when you enable this for.more branches all those subnets van communicate with eachother. You could use the vpn firewall to retrict this traffic if needed

ww · ‎Sep 29 2025

You want to route it between vlans? For mdns: https://documentation.meraki.com/MX/Other_Topics/Configuring_Bonjour_forwarding_for_the_MX_Security_Appliance For igmp you could try ask support if they have any option

ww · ‎Sep 23 2025

Maybe you can clone the wan2 mac address of the mx to a computer, and test on the wan2 ont connection. Dont forget to remove the mac clone after testing

ww · ‎Sep 23 2025

Do you have any global or client shaping limit on the SD-WAN & traffic shaping page? You could try with unlimited and 1Gb up/down there Did you also try another speed test website? Ping time in speedtest is also pretty high, maybe you can manually select a nearby server

ww · ‎Sep 18 2025

In dont know if and when meraki is inplementing bgp prefix filtering. Can't azure only advertise more spesific routes?

ww · ‎Sep 18 2025

On the branch mx where you select the hub. Make sure to not enable the default route checkbox https://documentation.meraki.com/MX/Site-to-site_VPN/Configuring_Hub-and-spoke_VPN_Connections_on_the_MX_Security_Appliance#Hub_and_Spoke_VPN_Setup_and_Configuration

ww · ‎Sep 11 2025

It depends on reg.domain, spatial streams and type of antenna. You should be able to calculate it using this: EIRP = transmit strength (dBm) + antenna gain (dBi) + 10log10 (number of spatial streams) (dBi) - cable loss (dB)

ww · ‎Sep 11 2025

Afaik L2tp doesnt advertise subnets to client vpn users. The client should use full tunnel to meraki. Or In case of split vpn, You should config the client vpn with (static) routes. @PhilipDAth had made a script i believe https://www.ifm.net.nz/cookbooks/meraki-client-vpn.html

About ww

ww

Community Record

Badges