Quote -    Your problem will be that Office 365 will have lots and lots of IP address ranges.   Conveniently, MS has a new service to supply the required IP addresses - Office 365 URLs and IP address ranges  ... View more

Interestingly, when the clever computer stuff for the broadcasters was set up for the last AC challenge in SF, the work was all designed and implemented by one of the Bay Area's giants of sailing (and the application of tech in broadcasting), whom I will refer to as Stan. Stan has impeccable SV contacts. However, when he was lashing together what was needed to seamlessly integrate the computer simulation with the live broadcast feed he chose not to use Meraki, or Ruckus, for that matter, but another local network manufacturer's kit. In part because this brand had a wider PtP and PtMP offering to complement the WiFi systems. As far as I was concerned, this manufacturer dropped the ball and made no use of this dream of a marketing opportunity, but that's network nerds for you. ... View more

I would investigate re-engineering the network so you don't use a centralised Internet access and instead use local break out for everything.   I absolutely endorse this suggestion from @PhilipDAth . We have moved to having all servers/storage in the Cloud and being very SAASy. It works, and it is very cost effective. ... View more

Why not let the Office users communicate directly with Office365/Azure cloud? Its encrypted. Local directories may be synch'ed with OneDrive. ... View more

I don't see any issues with using Meraki kit on a yacht, apart from:   Most of the folk promoting themselves as expert in fitting out marine environments for WiFi are delusional. The on-board equipment, TVs, Audio etc as well as laptops, may be completely or partially dependent on subscription services distributed using multicast IP. PCBs are liable to become etched when operated in a high temperature/high humidity salt-laden environment. Also -    Ashore I have solved the multicast issue by using a third party security gateway and switch ahead of the Meraki kit. This is a cost effective solution. If satellite connections require IPv6 to be active, I advise organising a trial prior to committing to a Meraki stack, as the Meraki IPv6 implementation is not yet completely transparent across the product range. Cleaning circuit boards is a simple task and not onerous. Recently, Meraki hardware has been successfully deployed aboard America's Cup support boats. Independently verify everything you are told.   ... View more

Regardless of any perceived need to disable DFS, please do not do so. The consequences of doing so can be fatal. If you do not wish to use channels that require DFS, then stick to  Band A UNI-1 Lower, indoor use only. Some regulators permit the use of Band C UNI-3 Upper by WIFi APs, but usually still require that DFS/TPC/CAC be active. ... View more

As you say,  the indoor AP can be used on every allowed frequency, however, any use of Band A Uni-2 Middle or Band B or Band C requires that DFS/TPC/CAC be active, whether used indoors or outdoors.   As somebody who regularly u sed to fly in wind shear conditions, I would be more than concerned if equipment were available which allowed users to configure it in contravention of the regulations. One of weather radar's functions is to detect wind shear. Wind shear isn't just another hazard, it can induce fatal outcomes, even on large commercial aircraft.   Maximum power usage in the non-DFS requiring portion of the spectrum is limited to 200 mW (23dBm), which may have a bearing on antenna choice. ... View more

The last time I revised my notes, I recorded -    Band A UNI-1 Lower, and Band A UNI-2 Middle were for indoor use only. Band A UNI-2 Middle use requires that DFS/TPC/CAC are enabled. Band B UNI-2 Extended frequencies are shared with weather radar. Band C UNI-3 Upper was originally intended for licensed FPTP outdoor use; in some jurisdictions it has been made available for WiFi Access Points.     ... View more

If you suspect fragmentation, it would be worth checking that you are maximising packet size (outgoing), from the client device, through the LAN/VLAN and out the gateway appliance/modem. It is possible that if the problems appears to be ISP related that the packet sized used to return handshaking packets is determined by the size of those sent out when the handshaking is initiated.   Sorting this out can get tedious, especially as different manufacturers/brands define packet sizes.contents differently. ... View more

Because we are a MS/Office/Exchange/OneDrive/Azure based organisation (and network hardware is not always the same at partner sites), we have deprecated the use of all local servers and storage. Virtually all communication is "up-and-down", rather than laterally; this is remarkably liberating, and simplifies many previously involved use cases. I can strongly recommend it, at least on a trial basis.   One of the tools we are investigating is the YubiKey, which facilitates authentication, including 802.1X. I'd say it is worth a look, https://www.yubico.com/ ,  they are used by an interesting mixture of organisations including Microsoft, CERN, Google, UK Government, US State Government and Novartis, amongst others. 802.1X may require some stuffing around, depending upon how it is implemented. ... View more

Possible workaround   Site A - 192.168.201.0/25 Site B - 192.168.201.128/25   This will split the 192.168.201.0/24 subnet into 2 halves, effectively. It can be adjusted to suit. ... View more

This really doesn't need to be done in hardware, it can be done in software. It is done in software on some other platforms. I can't see "rolling your own" as difficult project, for those so inclined. Frankly, I find ticketing for WiFi use abhorrent, and will not use it. I manage to travel widely without using ticket-based WiFi services. ... View more

@mikeshean11 wrote: It is showing the error. I have tried on 2 different routers and their configuration but still didn't work out. Cyberflix apk. You have provided Zero useful information, so your chances of getting a useful response to your post are slight.   It is as likely to be an Android issue as a Meraki MX issue. ... View more

It may be wise to source the Meraki equipment from within China lest you inadvertently violate the various rules about prohibited exports, they have been changed recently.   See -   http://sanctionsnews.bakermckenzie.com/us-government-imposes-comprehensive-restrictions-on-exports-reexports-to-huawei-and-its-affiliates-and-issues-executive-order-to-secure-information-and-communications-technology-and-services-in-the-un/   Best clear it with Donald or Melania first   ... View more

Phil that is a three year old thread.   In my experience, most of the "bugs" reported by UBNT users result from misconfiguration. You would be surprised how often Lazarus fixes the problem ("miraculously, I turned it on one day and it just worked, I didn't change anything").    Good sources of information are    https://help.ubnt.com/hc/en-us/articles/115005445768-UniFi-USG-Configuring-L2TP-Remote-Access-VPN UniFi - USG VPN: How to Configure Site-to-Site VPN   There can be mismatches with encryption standards. ... View more

What IP address is the client device behind the ER trying to connect to? What happens if the client is connected directly to the modem and they attempt to connect?   I find heterogeneous M2M VPN connections easier to establish that the remote client connections. ... View more

Actually, I go out of my way to see what happens when DFS/TPC/CAC comes into play. But I do keep an alternative AP that does not get interference. In my experience, it is better to explicitly assign WiFi frequencies and RX levels. ... View more

I am based close to the Channel, and have in my vicinity the UK Channel Control Centre as well as several military and ASR landing pads. To make matters worse there is a flight path used by animal transports overhead and the southbound transit route for shipping is within sight. This means that there is interference from marine, aviation and weather ground stations. In bad weather the interference increases as the military use anti-personnel radar. From time to time one of the Apaches notices my WiFi (and a large generator disguised as a haystack) and it does the "bee-dance". We exchange waves. The problem with using radar vulnerable channels is that, depending on the circumstances, the interaction of DFS/TPC/CAC can result in silent listening periods of up to 4 hours, but only in extreme cases. Most users assume that the AP has stopped functioning and log a fault. Understandably, the manufacturers wish to avoid this false fault report.  ... View more

ANPR   Organisations using ANPR have to be licensed and operators subjected to background checks.   The problem isn't OCR, it is control of how the information is used.   Of course you might just be conducting a census of what people have written on their T-Shirts. This could be a whole new field of research, some of the potential correlations make the mind boggle. ... View more

In an ideal world, network design should reflect work practices.   Having become a Cloud-centric organisation, without local servers, we have found that virtually all traffic is LAN to WAN and very little is LAN to LAN.   Fortunately, we had already chosen to implement multiple VLANs (to sort the sheep from the goats) and had ceased allowing catch-all values on access and link ports. So the switch to Cloud-centric was a no-brainer.   We do have a lot of VLANs; our network design/security methodology has become analogous to the Onion, with progressive "skins" of greater security. If everything is legit, its transparent, otherwise it is a quagmire, with its own Room 101. Each ring has its own unique VLAN schema (so there may be 3 Management VLANs - 11, 22, 33)  and firewalls between each skin.   It is much more complicated to describe than to implement. One of the benefits is that the goats (Guest WiFi, Multicast IP TV playout, IoT devices, AV kit etc) come nowhere near anything sensitive such as personal and application work stations and is completely unaware of secure LAN-WAN traffic. We do allow HDMI connectivity between secure devices on different layers; we monitor this for vulnerabilities.    Monitoring for vulnerabilities is important, we have detected attempts by "smart" utility metering equipment to access the Internet using Zigbee.   As more organisations adopt the Cloud-centric model, we expect to see more adoption of similar architectures.   I would suggest setting your strategic IS goals (ISSP), and then implementing a network design that simplifies enabling the transformations required to achieve those goals. ... View more

I have Wired  Z3C --> MX64 --> 3rd Party Router --> VDSL Modem --> ISP VDSL   Pubic IP is the dynamic IP from the ISP Cellular IP is the dynamic IP assigned by the MNO ... View more