I assume your ultimate goal is to have the users/computers authenticate against your RADIUS server correct?   Some documentation on your wifi offload stuff here https://documentation.meraki.com/MR/Encryption_and_Authentication/EAP-SIM_with_MR_Access_Points ... View more

I've asked a similar question and only support has visibility into the MX CPU utilization etc.  Seems like an obvious thing to include in the dashboard with device uptime etc...   Regarding the connections, the only real thing they've ever pointed me to is the number of clients.  Although that is a crude estimate of the amount of traffic since one client could be generating millions of requests an another could be silent.    Summary, we have little to no visibility into how hard the MX is working.  At one of our sites, I had to do a trial of an MX100 to finally diagnose that the MX84 was overtaxed.   ... View more

@jdsilva wrote: @Adam thanks dude. I got lucky there. I've been trying to learn myself some Python this week and it was just Monday I was playing around with the API a bit. Last week I never would known that 🙂 Agreed, making better use of the API stuff has been looming on my todo list for a while now.  I'd like to build some internal dashboards to monitor network uplink status, WAN IPs, highest traffic clients in a short time period, offline devices etc.   ... View more

Good eye @jdsilva   My original screenshot had the right variables for reference as well. The only things I changed was the xxx for security.  ... View more

Looks like the old ticket I had involved a Meraki AP not reporting CDP correctly to the switch.  We just toggled the CDP off then back on via the AP.  So not quite the same issue you are having. If it doesn't clear in a few days I'd recommend double checking that it isn't somehow still detecting an upstream device.  Especially using that little raw link in your screenshot.     Alternatively, you could try bouncing the port to see if that helps clear the CDP/LLDP identification.  ... View more

I haven't been bitten by this yet.  We do use 1:1 NAT in a couple of scenarios but I do have control of those upstream devices.  I'll try to dig into those to see what is different.  This request seems to parallel similar requests to be able to route traffic out the 1:1 NAT IP for the NAT device.  If that was possible it'd likely help resolve the issue and create more flexibility in routing.   ... View more

How long ago was that switch removed?  I believe it'll refresh in time.  There is a way to force the refresh as well.  I'm trying to dig up that information from an old ticket.  ... View more

My preferred method is to test a query in postman.  Once I'm getting the desired result I then click the small orange 'Code' link in the top right of postman and it'll bring up a box.  Then you can click the drop-down and select the language you want to use (HTTP, Python, PHP, Java, etc...) and it'll generate a code snippet for you to use.   ... View more

@Kristof wrote: Hi Adam, Thanks for your reply but I'm after a yes or no answer form a Meraki representative. We can only consider @PhilipDAth a pseudo-Meraki representative.  But I still agree with his final answer.  'No' ... View more

I believe the closest you'll get to this on the MX is VLANs and Policies.   ... View more

On that Security Appliance>Traffic Shaping page where you enable it, it is also helpful to set the WAN circuit speeds at the top to facilitate the load balancing. If you have the need you can also set flow preferences if you have anything that needs to go over one circuit or the other specifically.  ... View more

I had this issue at one point and can't seem to remember what caused it.  It's been a while.  Maybe content filtering or how do you have these settings configured? ... View more

The USB is really only for a last ditch failover if WAN1 and WAN2 are down.    Othwerise I prefer cradlepoint devices.  They work well to reliably convert cellular network to ethernet.  ... View more

@PhilipDAth wrote: I believe if you open a case with support they can enable that as an option.  Otherwise no. I contacted support and they enabled that option.  Thanks for all the feedback.  I didn't think about dropping the 5Ghz lower as well.  ... View more

Do you want to use the device as an active secondary WAN connection or just for failover? Do you have a single WAN connection or redundant WAN connections currently? ... View more

Hey @BlakeRichardson, I have a few situations where I use ACLs but they tend to be somewhat limited.  Do you have any options to supernet some subnets to consolidate?  But I agree, I have a lot more rules then I'd need to have if I could just get the ability to enter multiple sources, destinations or ports for a given rule.  ... View more

@jdsilva wrote: Hi @DarkStar.   Go to Organization --> overview, then select the "devices" tab. There's a "CSV" button in the top right to export.   Is that what you're after? I'm thinking he may want a list of all of the devices in a given Network.  Or in all networks.  I think that overview page just exports the list of network names.  To achieve what you're looking for you may have to go to an API request.  One of the Meraki techs made a python script to do something similar to that for me but to only export those devices with no location set.     ... View more

Check the upstream port VLAN configuration as well.  ... View more

Did you try doing a shut, leave it for 5-10 seconds, then a no shut? ... View more

Wow MR58 huh?  Long before my tenure with Meraki for sure.  One you have it mounted up, link a picture here.  Would be cool to see it 🙂   ... View more

@ww wrote: @Adam wrote:   If you go to Security Appliance>Traffic Shaping there are two options.  Flow Preference - Internet Traffic and Flow Preference - VPN Traffic.     isn't that only for site2site vpn and not for client vpn?. i don't think there is another option then described in the earlier linked topic. maybe ask meraki if the flow preference bug for voice is fixed in a beta code. Ah you're right, haven't had my coffee yet. So maybe he can put the client VPN traffic on a dedicated subnet and use that to set the flow preference?  Or does it sound like he is wanting the traffic just to come in on that secondary WAN interface? ... View more

Definitely one of the more interesting topologies I've seen.  Are you using the Auto VPN feature between the MX's?  Can't remember if I asked that but that would connect the two as if they were local to each other regardless of what is in between.  That link from CiscoRouter 1 through Core to the top firewall gives me a little concern.  You have a potential routing loop there if you're not careful.  ... View more

One point worth clarifying initially is that the secondary WAN would be referred to as WAN2.  Primary as WAN1.    If you go to Security Appliance>Traffic Shaping there are two options.  Flow Preference - Internet Traffic and Flow Preference - VPN Traffic.  It sounds like you are just wanting to configure the VPN traffic preference so you'd setup something like this.  Remember this is destination-based routing so you'd have to configure accordingly.      ... View more