Hi everybody,  Please how to add 2 vlans as destination in Ms 105 ACL rule ?   ... View more

Was this ever resolved?  We may be seeing something similar...  6 years later ... View more

i don't know it's still be a problem with you or not, but recently we faced the same problem, when we added the new switch that has lower mac address and create stack the existing switch as a stack together, the newer one become active role due to lower mac address   our approach is rebooted the newer one, and the active role move to the existing/older one.. referred to this documentation    https://documentation.meraki.com/MS/Stacking/Switch_Stacks#Configuring_a_Physical_Switch_Stack     ... View more

I have now created another work around for my issue - collecting MT Sensor information. Using POSTMAN and API GET queries. This was a great place to start however. ... View more

Well, that is still a workaround, albeit quite a good one! You still need to realise that this is the issue, change back and forth, etc.. I have have not given up the hope that at one day this will be fixed for good. ... View more

Our organization license is good for 3 more years.  Bought a new device & license.  The device got claimed, but the license wasn't applied some how.   SAML org admin's don't get email notifications for non compliance licenses. We were on with tech support the week before for an hour with no mention that there was a device out of compliance. This is an absolutely terrible business practice and I doubt it will change based on what any of the customers say.  ... View more

The Palo is too complex for us.  But yeah, I do need basic features and I'm finding out the MX is missing them. ... View more

Good day, Amit_Pal I cannot even get on the dashboard. who can I contact to deactivate the account with elevated rights so that I can be able to access the Dimension Data Meraki dashboard for my organization.  ... View more

We had Meraki for 3 years and switched to FortiNet, and we still have home offices on Meraki. There is a learning curve as those things are 10x more capable and feature rich, but also more complex. They do have cloud mnagement as well, but if a device comes with gig ports, it's pushing  gig. I've been pushing ~300  clients through 2x 1gig uplinks with a FortiGate 60F (~$1000) without any problems. ... View more

Hello, I am new to networking and dealing with fiber.   I got nervous when I saw mention of upstream fiber.   If I have multimode fiber as my uplink at a MS250 switch and have a couple of multimode fibers on SFP ports coming out of it, but I want to add one single mode on another one am I going to run into problems?   I have a scenario where I have some good distance to another building and I had requested single mode be pulled. ... View more

You only need one of them configured on the switch were your core AV device is that discovers all the A/V devices on the network(and put the querier on the correct vlan). You also only need the IGMP querier if they are on separate switches. We had a Shure vendor tech support try and tell us that the Mics didn't support vlans but that was just them trying to blame our network for audio streams making it to the core device but getting silently ignored(when they had been working for years before without issue). ... View more

I posted this in another thread, but I am going to add my two cents here as well.   For anyone dealing with this issue, Meraki and Umbrella were unable to provide a complete solution, due to whatsapp heavy integration with Facebook.  Umbrella and Meraki can block the web and desktop app, but the mobile app continued to work.  I had to use a layer 3 firewall rule to block the Facebook IP ranges associated with Whatsapp.  You can find them here: https://developers.facebook.com/docs/whatsapp/guides/network-requirements/ under the IP addresses section.  It was a complete pain to create 230 objects and 2 object groups (remember object groups only be 150 objects max) but I have successfully blocked whatsapp completely.  I know that the ip addresses may change in the future, but that is something I will just have to deal with when it comes along. ... View more

I have the Lift-off badge, guess you got to start somewhere.  Looking to earn more in the future. ... View more

Hello, the bug is still present! We have lived a nightmare with this. Fortunately the fix for 12 seconds help sorting out this issue. You don't imagine how it is for an entire hotel not to have TV for 24 hours before seeing this post! ... View more

I wanted to add additional information for others. Meraki's official stance is to work with the ISP/upstream router to disable IPv6. We are still trying to work with the multiple ISPs we have, but some are easier than others to have this disabled as most are dual stack. ... View more

I guess nothing has changed in 4 months? since @JohnT's message? ... View more

yes, correct! @GreenMan @maybe you‘ve a suggestion how the cabling should look in such a case too? ... View more

I know this is old, but here's another vote to allow rules to be disabled.  My rep convinced me to "upgrade" from ASA-5525 due to them reaching EOL.   These MXs are not nearly as feature rich.  Cannot NAT across internal ports, cannot disable rules, no test (apply) then commit pattern.    On the other hand, traffic analysis is MUCH better.   My two mfu use cases:  testing a new rule;  confirming an old rule is no longer needed. ... View more

Hi Ryan the link provided does not take me directly to the Bulk address changer could you provide the current on I could not find it browsing the site   Thanks ... View more

Appreciate, problem solved. ... View more

I agree.  If we had required faster uplinks, we would have replaced the Meraki's with another firewall.  Fortunately we don't need the extra bandwidth, so it doesn't matter for our use case.  But the companies that make their own chips are able to offload some CPU intensive things to ASIC chips.  That is the way that all manufacturers should be headed and hopefully Cisco will instead of trying to cram everything into an intel system on a chip.  Hardware $ for $ Meraki is far from competitive.  But the software is what makes us stick around.  Too bad the software stack can't run on another large brand's hardware, then we could FortiMeraki or MerakiGate.... UnifiMeraki....  ... View more

I can't believe three years later, that this is STILL a problem. I am losing faith in Cisco products related to security. I have the same problem with false positives other Cisco products with AMP and their support is horrid for these features.  ... View more

Thanks very much for posting about this, I just hit exactly this issue. They should really label the UI dropdown UDP & TCP and not 'any'! ... View more

We are looking for a solution for this also ... View more

Including Meraki's own "Cloud Communication" traffic, apparently....sigh.  On hold for support for 20 mins and was simply disconnected.  Thought I'd come out here and take a look.  Glad we pay the big bucks for "enterprise support" vs. having to DYI on the forums.   May 04 12:39:32 98.173.248.218 logger <134>1 1651685972.152202720 FER_Office_appliance l7_firewall src=192.168.128.105 dst=209.206.63.216 protocol=udp sport=45253 dport=7351 decision=blocked May 04 12:39:32 98.173.248.218 logger <134>1 1651685972.205257006 FER_Office_appliance l7_firewall src=192.168.128.20 dst=209.206.63.216 protocol=udp sport=48040 dport=7351 decision=blocked ... View more