Hi,   We are a builders merchant and have lots of Kitchen showrooms in our stores. They are getting in products such as smart ovens and Amazon Alexa devices to control them which we need to join to an SSID so they will work. The devices need to be on the same network and need to be able to communicate with each other for this to happen. I tried this on our guest Meraki network which is using NAT mode but the devices cannot communicate to each other on that network by design from Meraki (forgot before I tried).   Does anyone know the next best option taking into account we would rather not have these unmanageable devices on our corporate network, the other solutions I can think of are to create a new SSID maybe using bridged mode for one of the devices and set an internal IP then allow the guest network to communicate to that one IP on the LAN. Was just wondering if anyone else had any other alternative ideas for this scenario.   Thanks! ... View more

Our guest networks have been setup with a Pre-Shared Key for association to satisfy a recent penetration test. We previously had an Open association with the user required to create a Meraki account which automatically authorised them onto the network - the reason for this is because we have a requirement to capture the users details that is associating with our network and this was the simplest way of doing so. Details such as Name and email address or phone number.   We now have a bit of a tricky situation as our guest users must obtain the Pre-Shared Key and then they have to register by creating a Meraki account via the splash page and they need to remember those details each time they want access and might be a little too much for them to take the effort to start using the service. The splash page settings are set to every week now which should improve customer experience by being a once a week session association.   We would like to know if there is a way of dropping the Meraki Authentication process and instead deploying a splash page which simply asks the users to enter a name and email address (and T&Cs would still be present) and have that information recorded on the Dashboard or to some logging device so we have a record. Taking away the need for the guest to remember a password and simply input their details would simplify the process and we would like to know if it is possible or if anyone else had any other suggestions. I know that you can amend existing Meraki splash page templates and there is one for click through but we would like to capture their information and use that process instead of using the Meraki Auth process.   Hope that makes sense!         ... View more

Hi Everyone, I need some assistance with the certificate required for the NPS server that allows both network clients and Meraki APs to validate the server's identity. We do not have a PKI so we will be obtaining a certificate from a trusted CA. I want to deploy two radius servers in our forest for resiliency and I want to use a single certificate for both of them.   Do I need to generate a CSR from one of the servers to purchase the certificate from a CA? It needs to be a certificate that all our domain joined machines trust as well and we've been given the option of purchasing a GeoTrust certificate from our certificate provider. Would this work? Would I just need to add the certificate to the radius servers and then would we need to deploy the same certificate to our domain joined machines which exist in child domains within the forest it would be purchased from?   My certificate knowledge is not the greatest hence the post, hope you can help.   Thanks     ... View more