Your traffic needs to arrive with dscp 46/ef on the mx. So tagging should be done at client, wifi or switch.   Or using the default traffic shaping rule "should" work for voice traffic. (But meraki documentation really lacks info on what the default shaping rules do and which traffic it matches) ... View more

It's this Chrome setting. https://community.meraki.com/t5/Full-Stack-Network-Wide/Who-is-still-having-an-issue-with-client-names-in-the-Meraki/m-p/282397/highlight/true#M3108   ... View more

Has anyone figured out how to "deauthorize" the Entra Splashpage uses via API.  It seems to not work sinces its not a click-through splashpage.  I can do it from the Portal but we want to make sure everyone has a fresh splashpage timer on Monday morning. ... View more

I have this same issue, I setup my SMS 2FA, log off, and after a while I tried to log in, but it's only asking for my user name and password. I did receive the SMS in my phone, but in the website is not showing me the screen to type the code I received.  I tried in different browsers, clean the cache, incognito, etc.  ... View more

Whenever you create a new network without any devices in it you will get all the sections (MX, MR, MS, MT,...)  So you can already configure firewall rules and SSID's before adding any device. However you won't have any switchports and MX LAN ports to configure before you add the devices to it. Once you have added all relevant devices, the other unused configuration sections will disappear. ... View more

Hello,   do you know if something in the meantime changed and MX68CW now supports CoA?   Thank you in advance! ... View more

That's a valid concern Telegram can bypass standard filters and expose students to unmonitored content. Adding it under SDWAN > Firewall or at least categorizing it properly in “Social Web” would improve control and filtering. This update could help schools enforce safer browsing policies more effectively. ... View more

Hi Paniya,   This article helped us a lot: https://community.fortinet.com/t5/FortiAuthenticator/Technical-Tip-FortiAuthenticator-802-1x-EAP-TLS-with-computer/ta-p/212559   The Meraki AP (connected to a Cisco switch) was set as the RADIUS Client in FAC. We also had to use the Local Out Routing feature on the Fortigate, this makes sure that the Meraki AP IP address is used as the source IP and not each WiFi connected client seperately. ... View more

Do it using content filtering. https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Content_Filtering     ... View more

Here here @Jagatiya143 - I completely agree - Amy and Caroline are the absolute BEST! This is an amazing community because of the members and the passion of everyone involved.  ... View more

Yes that is right. Since Meraki MX do not have a MGMT vlan / interface / vrf they rely on the now Highest Vlan ID to source all sort of trafic ( Syslog , RADIUS and more ). We also had to design our network with these specific requirements. ... View more

Well that isn't true at all. You can setup a Client VPN server with technologies like OpenVPN, Wireguard, etc, behind the firewall and forward ports through to the VPN server. ... View more

https://documentation.meraki.com/MX/MultiWAN_Backup_Uplink ... View more

There is a known routing issue according to TAC for Z3s running 19.1.5. Excessive flapping to SDWAN site connections and to secure connect  ... View more

Hi Dunky,  yes,  can i have the case number, ive got an issue with p2p traffic ... View more

19.1.7.1 has now been released to fix MX-36338 ... View more

See below.  Can't you just use the option, "Traffic not to/from"?       For example, if I want to allow traffic from and to the US but no other countries I can add the rule that reads like this, "Deny Countries Traffic not To/From United States" ... View more

So when are we going to get device uptime for MXs? How has it been 4.5 years and we still don't have this wildly basic functionality? ... View more

OK, thanks for the update. You will need to purchase Secure licenses separately. You need to reach out to your preferred partner, could be ATT, CDW etc and purchase licensing, which will be separate than Meraki licenses. You can order through many vendors directly.   https://www.cisco.com/c/en/us/products/collateral/security/anyconnect-secure-mobility-client/secure-client-og.html   There are three types. I would just suggest Plus if your doing VPN only to cover the amount of users that you need (minimum is still 25 I believe). That covers you to use the software from the Meraki side, and support/upgrades that you can get directly. Its not very expensive unless you have hundreds/thousands that you need. You can pool smart licenses together now so if you by 100, they can be shared between all devices that need licenses with smart licenses vs buying them per device.   As far as the SMB speeds, I cannot say for sure why its happening other than I don't have that problem over Secure client. The only other thing I can say is maybe upgrading the client to the newest version could help/fix the issue. ... View more

I actually need to do this as well. Could templates export/import features to be developed? ... View more

There are solutions like "UDP-Multiplexers". I've been using them e.g. with customers implementing Secure Network Analytics. Simply switch over to their Flow Replicator that forwards Netflow to different destinations.   Something like https://github.com/thomseddon/udp-replicator would even be a very sleek solution - and Open Source too. ... View more

this is true which we all know by now. there are however gotchas that are serious and you might not want to do this as the Cloud Monitoring Tool for Catalyst makes a scad of changes including SNMP v2c using the Community Public. This is bad, bad, bad and our pentester has ordered us to delete the line. SNMP v3 has been out for ages and is always preferred over v2c. and for gods sake why use the hackerfriendly community of Public?  Our CISO says Cisco is not a security company and that sure is one proof of it. ... View more

Hi! Not working  ... View more

Thank you I will investigate, have you tested this?   I spun up a webapp that housed the list and created the object, created the FW rules, but it did not work so not sure if it requires a special convention. ... View more