Hi @ccall678 ,    Have you tried taking a packet capture off the RADIUS server's uplink interface, or the switchport directly connected to the RADIUS server to confirm it is getting RADIUS messages? If so, are you seeing the RADIUS server then send RADIUS replies back towards the AP?  ... View more

@PhilipDAth all the NTP calls I traced were from APs where every SSID is in bridge mode, so it looks to me then like the APs themselves make a lot of different NTP calls... ... View more

Although all of my staff laptops are members of an Active Directory domain and are managed by Group Policy, I do not manage wireless profiles on those devices using a group policy. The staff member who uses each laptop actually signs into the device using a local account, not a domain account. This means I can use a local administrator account on the affected machines to delete the faulty profile and then import an "all user" profile for the same SSID.   School laptops that are used by students do have wi-fi managed through group policy (primarily to prevent them from connecting to cell phone hotspots as a way to bypass the school firewall). However, I have never experienced this issue on those laptops.   After doing some experimenting over the last few weeks, I think the issue can be avoided if I join the device to wi-fi at the right time during setup.      1. Install a (non-domain) image onto the device over ethernet using MDT.      2. Connect to wi-fi using the local administrator account.      3. Join the laptop to the domain (over wi-fi).      4. Create the local account for the end-user.   If the device is domain-joined with MDT as part of sysprep or domain-joined over ethernet after setup has finished and THEN connected to wi-fi, the resulting wireless profile will be "per user", but will not exhibit any issues.   If the local user account is created and that account is used to join wi-fi, then not only will the wireless profile be "per user", but the wi-fi connection will drop whenever a running task owned by 'SYSTEM', 'LOCAL SERVICE', or 'NETWORK SERVICE' attempts to access something over the network.   ... View more

I hope you find the answer.  I have been looking for an answer to that and always get stuck with the datasheet, which doesn't answer those kinds of questions ... View more

Hello , what did you do to solve this issue ? , i think  i have the same problem  ... View more

Rudi, when i go to 'Network-Wide', 'Users', the only thing I see are the names of the Meraki administrators.  Is there any new information on this request? This is most helpful so that we can audit facilities that abuse the wireless Guest network.  ... View more

Seeing the same at one of our sites.   We have two Meraki MR52s there and admittedly we don't spend a lot of time tuning them. The spoof alerts started last week. I have basically disabled one of the APs and greatly reduced power for the other. Users are happy with the settings, and I'm seeing way less interference on the remaining AP.   The spoof alert only shows up if I try to re-enable the other AP. Any band and any power level and the deauth packets start going out again. I'm going to power off the AP from the switch today and monitor through the rest of the week. ... View more

Thanks for updating us on the situation.  ... View more

Thanks Deniz, that's good to know! ... View more

There are way too many unknowns here.  If might not be the WiFi network at all.   If you leave a continuous ping running do you loose anything? Does Wireless Health report anything interesting?   Are you running on the 5Ghz spectrum?   Have you got other wireless devices (such as cordless phones) and if so, what frequencies are they running on?  Something like a cordless phone could be stamping over the WiFi. ... View more

Oh I see. Check out this video from one of the users here:   https://community.meraki.com/t5/Community-Announcements/We-have-a-winner-Congratulations-to-BrothersTM/ba-p/23740 ... View more

Looking at the Wireless Health area for failed connections, I am seeing a lot of 802.1X auth fail with different num_eap='xx' values, is there a way to find out what these values represent, have done a google search and it does not show much on it? do they represent the type of error they user is getting or the number of times they have tried to connect with a problem? It is a good initial trouble shooting tool for when users complain about wireless problems. ... View more

Good to hear it is working again.  Must have been a serverside issue.  ... View more

AP licenses are model-agnostic and also never tied to a specific AP or serial number.  So if you have 10 AP licenses, it doesn't matter what mix of actual access points you have, as long as there's 10 or less.  If you are removing some MR16s from a network and adding in some MR42s in their place, there's nothing to do, it's automatic.  If you end up with too many APs after putting the MR42s in place, then it would be because you didn't remove the old MR16 APs.  Once you do, the MR16s will be sitting in your Organization > Configure > Inventory, but not assigned to any networks and therefore will not decrease your license count.  Hope that helps! ... View more

@YBerllan wrote: This is very odd?    I do not have that view. This is what I have    I have full admin rights!  This looks correct - if you click the circle to the left of "Blocked" a box to type in will appear. The save button will show up on the bottom of the box that appears. ... View more

Hi, I think this thread answers what you're looking for:   https://community.meraki.com/t5/Wireless-LAN/Iphones-and-Androids-Bluetooth-not-showing-on-BLE-scanning/m-p/21170#M3520 ... View more

@JoeCrouch The maximum transmit output power of the AP (the intentional radiator) is typically going to be 30dBm (1 watt) for both the 2.4 and 5GHz radios.  This could vary based on your regulatory domain and possible other factors.  A little more info in the support doc.  https://documentation.meraki.com/MR/Radio_Settings/Max_Radio_Power_Limitations  I'd call into Support to verify for your specific installation and region. ... View more

Hi @Prafull_Koli,    The error you get at the top left refers to a problem with the DNS configured on the MR33, so it's related to its LAN configuration.  The DNS failure you have highlighted refers instead to the clients.   As you are experiencing problems on both, I would consider investigating the DNS first, make sure it's reachable and the DNS service is running.   Giacomo ... View more

Looking a bit closer, I now have 802.11x auth fail messages for a chromebook, which should not be effected by 802.11r as adaptive.   ... View more

Thanks - I did look at the documentation, but it really doesn't offer any help. 802.11 frames is vague to say the least. Does it check the latency of every single frame? Are there specific latency frames it is using to test with? I've been running a ping against a machine connected there for the last hour, and the highest latency I've seen is 17ms. Yet the AP still shows an average over 700ms.  ... View more

No worries. It catches everyone out with its dynamic nature. ... View more

I was having a similar issue on my network, with 2 specific devices (laptops, not phones). In my case it was a firmware upgrade that solved the issue, the machines were seeing up to several hundred failed connections per day. I assume the devices are probably updated, so this probably isn't helpful, but thought I'd offer my experience with it. ... View more

You could also setup the guest SSID to use SMS authentication using the Twilio integration. It works very well, and is easy to setup even with no experience using Twilio. It will force users to enter their phone number in order to access the WiFi, though it won't provide e-mails if you're after both.  ... View more