I know this post is a few years old, and I wanted to comment on the firmware differences between the MX65 and MX68.   The MX65's maximum runnable firmware version is up to MX 18.1xxx, as per this documentation that discusses product firmware version restrictions. It cannot be upgraded to MX 18.2+ firmware or any newer major release versions. If networks with these devices are set to run newer firmware versions (such as 18.2), they will automatically use an MX 18.1 firmware version instead.   The MX68, however, can run the current stable firmware version MX 18.2+ and even the beta release version of MX 19.1.x. This enables features such as Firewall Logging, Trusted Traffic Exclusions (Advanced Security License required), Routed mode eBGP, and more! You can see the stable release firmware features for 18.2.X linked here and the beta release firmware features for MX 19.1.X. over here.   Hope this helps! ... View more

if anyone is still in the thread i have the same issue but the AP is working and broadcasting other SSID along with this Meraki Setup SSID, its added to cloud but still waiting on licenses is that the issue ?? ... View more

Update again 7 months later - flawless operation with the same firmware I downgraded to. Works perfectly not a single hitch. Totally a firmware thing. 16.16.9 ... View more

This is an old chain but I had the same question.  Where is the setting?  Thought about it and wondered, is it possible that your APs are those with network ports on them and you activated a Port Profile or have a device attached to them that joined that SSID? ... View more

This issue hit me too.  There are firewall setting under the wireless tab separate from the rest of the firewall settings, which is annoying. The folks with an iPhone were having trouble sending messages with attachments cause the wireless firewall rule for blocking online backup was enabled. That rule stops iPhones from connecting to iCloud. ... View more

Hurray!!! 😄 Thanks a bunch @AmyReyes  and here's to many more years of Meraki fun. 😄 ... View more

Yeah we ended up switching it over the way I thought to and then it didn’t work! So I used mx.meraki.com locally (serial number is the admin name) and it was a cinch to switch everything over. All is well thanks all. ... View more

Gotcha; thanks as always  ... View more

Hello RumorConsumer,   I think what you were missing was the Management VLAN setting.... Navigate to Switch -> Switch Settings, at the top you define the Management VLAN. All your APs and Switches will try to grab an address from this VLAN.     ... View more

ok thanks big kahuna. ... View more

Actually it looks like maybe they still are selling Wifi5. ... View more

Wanting to buy an MX75 and it’s saying almost a whole year lead time… ... View more

Ruh Roh. Who's our company rep on here these days? this seems like a more.. impactful bug than teleworker VPNs using blah blah only fail on prime number's VLANs or whatever.  ... View more

I believe you. And no network repeaters here. Plus a network repeater would need to be pulling a DHCP address right? It would need to be an active client, no? Otherwise if it were just a spoof it would be trying to convince my clients to join it but then it wouldn't offer any network connectivity or LAN access. Id have some pretty angry users. And wouldn't a spoof need to have credentials that my clients wouldn't be able to provide? Sounds like it would break things pretty noticeably.  ... View more

I just put them on the same VLAN. its fine. I was trying to avoid the chance that somebody uses the wrong port (I want to keep one open) and this was my attempt which failed. its ok this works fine. ... View more

Ok you guys arent going to believe this....     So we had this construction project going on for months on this renovated building. We had an access point called Floor 1 sitting on the network stack because there was nowhere to mount it yet in the main room because the walls weren't done.   We had another access point ready to go for Floor 2 and that access point wasnt yet claimed in order to avoid unnecessary license fees.    We just finished the project and my co-admin went about mounting the access points while I was out for a few minutes.   I get back and start testing it and all the devices on Floor 1's dashboard are getting abysmal signal strength. I can't believe it. We had tested it reasonably and this new wall went up but it shouldnt be THAT bad.   Im lightly panicking. I write this post and start researching more powerful antennas.    Then I notice that the light on the bottom of the access point Im on isnt blue. "That's funny..." I think to myself.    Then I go to reboot it through the dashboard. And the light stays on.    Nothing makes sense here.    Except... my co-admin had switched the access points accidentally. Floor 1 is now an entire flight up from where we are and the access point on our floor isnt even claimed yet.    Immediate relief.    So I claim it and of course now its healthy as a horse.    Thanks for the responses. Hopefully this story was worth the trouble. Haha. ... View more

You’re over thinking it, if you want to block those two domains then just add them to the block list that should block them.   The documentation you read about whitelist, blocklist and why you can do it one way and not the other is to do with how rules are processed, in your case it’s not relevant if all you’re trying to do is block those two domains. Whitelists are processed first, and if there is a hit then the domain is allowed. If the domain isn’t listed in the whitelist then the blocklist is tested. When a domain is tested the subdomains are iteratively removed, thus if you whitelist a parent domain it will always hit the parent during testing, and never get tested against the child in the blocklist. Hope this makes a bit more sense now. ... View more

You can't remove them from a combined network once they exist.   You have to create a new combined network with just the right kit, and then move everything across.     Well, maybe your idea has some merit.  You could try support.  I've never tried that.  They do have lots of magic available. ... View more

Yes, eventually the claim finished. After that a second claim took right away. So as stated there must have been an issue with there database that need to get resolved. ... View more

Cool thanks! Done. ... View more

Fix was a hard factory reset (paperclip for 10 seconds kind of thing) of the device ... View more

In case the ap connect a switchport set to trunk with native and allowed  vlan 1. Then yes.   Maybe not all switch  vendors like it this way. I would still use "dont use vlan tagging" only for the native vlan or when the ap is connected  to a access port.   ... View more

Ok gotcha. Without going into too much detail.... how is that possible? Isn't the whole point of Meraki DHCP that it is designed to prevent this kind of behavior? Break it down, O.G. ... View more