Just a little clarification... JumpCloud doesn't "replace" Azure AD as that is the substrate for Office 365 (and Azure user management). What we do is integrate with Azure AD so that you can provision / manage Azure AD identities, but also use that same identity for Merkai WiFi, systems, applications, etc.   You can always try the platform for free or just drop us a note and we are happy to run through a demo and/or answer any questions. You can reach us at support@jumpcloud.com.   Happy Holidays!    ... View more

I've noticed at times too that the dashboard is sluggish.  It's not all the time, but throughout the week, I'll have a handful of times the page will sit half loaded.   ... View more

Hi there,   It may not be enough to just have LLDP enabled. See this KB and make sure the port is configured as is recommended as well: https://documentation.meraki.com/MR/Other_Topics/Low_Power_Mode_on_Cisco_Switches.   Also, it is not recommended to use an AC power adapter while PoE is enabled on the switch port. It should be either PoE or AC adapter. ... View more

@ww It's because of customer's information security policy. They want to observe every traffic -including site's Internet traffic- and must goes through center gateway in order to pass IPS, WAF and other do-dads. ... View more

Thank you guys for your answers. ... View more

I'm using old Buffalo 54G router with dd-wrt firmware as wireless bridge to connect my old HP laser printer equipped with wired Jetdirect addon into home wireless network. If you have some old wireless router supports dd-wrt, how about recycle it as useful bridge? - Supported devices : https://dd-wrt.com/support/router-database/ (Search your router model name) - Tutorial for wireless bridge : https://forum.dd-wrt.com/wiki/index.php/Wireless_Bridge ... View more

We had an issue last week where a couple of access points that had been rebooted suddenly stopped recognising clients in a group policy that did not require a splash screen, and hence the clients were being shown the splash screen.  If the same users moved to a different AP, then they did not see the splash screen as expected   I ended up applying all the whitelisted clients mac addresses back into the dashboard into the policy, after doing so the affected AP's appplied the correct policy (no splash)   However, I then saw this fixed bug in the release notes of the latest beta 25.6, and wondered if our issue was related to that ..... Group policy not applying to clients immediately after MR boot (802.11n/ac/ac Wave 2 MRs)   ... View more

Hi @PhilipDAth    one last clarification, if I setup the account per user, will the meraki require log-in once connected to any SSID of my MR and will not be able to use the network even if someone knew the password for any SSID? ... View more

this is exactly what the setup is like. I have asked the quesion and it turns out that on port 2 of the ISP switch/router is where you get the RFC1918 space address. On port 4 i have a public ip range and i can configure it manually and it is working thank you ... View more

It can do more than 750Mbps for short period, but cannot do it regulary.   So, if you need 1Gbps performance, you need to go to MX250. ... View more

https://en.wikipedia.org/wiki/Martian_packet     ... View more

You wont be able to achieve both MX and ISP redundancy with a VPN to Amazon using this method.   If it is that important to you I would change to using the VMX in Amazon.  This will be far the simplest solution.   You could use two active/active MX in VPN concentrator mode, then put them behind a warm spare pare of MX (these two MX could run active/active as well if you like).  Then use a layer 3 switch and a dynamic routing protocol between the two MX in VPN concentrator mode. If you are using warm spare mode and this type of configuration you really want both ISPs to plug into both MX to keep NAT simple.   If you want another complicated solution and don't mind running a script somewhere you could also consider using tag based VPN failover. https://documentation.meraki.com/MX/Site-to-site_VPN/Tag-Based_IPsec_VPN_Failover ... View more

Hi,   I had two Internet connections for HQ and each branch office. ASA injects redistributed static route to the core switch, or you can create a generic branch office subnet(10.10.0.0/16) toward ASA.   Then create more specific static route (10.10.10.0/24 for Branch A, 10.10.20.0/24 for Branch B) to Meraki whenever you switch over onto it. That how I did for 80+ branches.  However, if I could do it again, I would set up a MX100 on a transparent mode so that I could use OSPF.     ... View more

I have given some to my 3 yr old son. He puts his hot wheels cars in them. Useful for vacation and plane rides so he doesn't lose them. ... View more

As far as I know, there are no way to figure out which port of MX is connected to specific client. Only can be done when you are using MS switches. ... View more

Hi Philip, Thank you for taking your time to comment. The issue I had was that traffic was not getting back to the MX, so needed to find another way to make this work. But after some investigation it was found that server was getting the packed but replying via the default gateway and that was the ASA. ASA was dropping the packet. Asymmetric routing was happening. Had to configure tcp-state-bypass on the ASA to permit this subnet to talk to VPN subnet via ASA. All is working for TCP and UDP traffic. ICMP is still not working but i will take it. What I should of done is connect the MX on its own Vlan. Never rely on ASA to be a router 🙂 ... View more

Thank-you @BrechtSchamp and @PhilipDAth, you were right. I hadn't noticed this is a POST, not GET method. ... View more

Hey @Kamome ,   under traffic shaping -> SD-WAN policies you can set "Custom performance classes" and you can apply them to your VPN Traffic and set it to a WAN Interface     Hope that helps.   Greets ... View more

Thanks for sharing! Haven't tested it, but it's good to know it's here if I ever need it. ... View more

If you really really really would like a license i'll give you one for the special price of 10$ / yr Extra features: you can brag about your exclusive soap with a license but that's it.. 😉 haha ... View more