Hello, I am doing some investigating into an issue with DNS registration.  We recently moved our entire workforce to work from home, connecting using the Meraki client VPN with custom nameservers of our internal Windows DNS servers. When machines were originally brought home, I noticed that they were not registered in DNS.    We then tested a script that would check the "Register this connections addresses in DNS" and "Use this connections DNS suffix in DNS registration" for the members of the IT support team.  I did notice that only two of the machines out of the 7 that were set with that setting registered the correct VPN IP in DNS.   A week or so passed as I had to move on to more pressing issues, and I went back to look at it today, now I see almost 600 of these machines registered in DNS, but with their home LAN IP.  This script to select those options has not been run for anyone other than that initial group of 7.   Is there is a way to register only the correct Meraki VPN IP address in DNS?   Thanks in advance! -Eric ... View more

Here is the situation:  I am looking to apply different DNS servers (cisco umbrella) only to clients of a certain SSID.    I have seen that this is available using the "Content Filtering" selection of "custom DNS" in the Wireless Access Control page, but this is only available when using the "NAT mode: Use Meraki DHCP" option for client IP assignment.   The issue is that we have VLAN tagging on this traffic to go out a separate MX100 using a secondary internet circuit, so we have to use "Bridge Mode: Make clients part of the LAN" to enable the VLAN tagging.   Do I have to create another VLAN on the MX? (DHCP is handled by the MX currently).  Then I would have to adjust the port configuration between the MX and the MS, the ports on both are currently configured as access ports for this VLAN.   Am I missing something here?  I thought this was going to be an easy setup. ... View more

Hello, I am having an issue contacting a DHCP server only when connecting from an access point on our new VLAN.   We set up a small satellite office and set it to use VLAN 10.  We have it set up as follows:   An MX100 set up with subnet of 192.168.135.0/24, MX IP of 192.168.135.254, and VLAN ID: 10. Port 2 on the MX is set up as an access port on VLAN 10. That port is connected to a MS225 port that is an Access on VLAN 10 also. The MX is set up as a DHCP server and works fine with any wired clients on the MS225. Each port on the MS225 is tagged as access VLAN 10. The WAP is a MR42, set with only one SSID, which is set to tag traffic as VLAN 10. I am seeing errors in the VLAN request status on the LAN tab of the access point. I see for VLAN 10 5/5 DHCP failures I also see UNTAGGED VLAN it says 0/5 DNS failures.   I am not sure what my issue could be.  Any ideas of what to try here?   Thanks! -Eric   ... View more

Hello everyone,   I have a question about a setup that I have been tasked with completing, and just wanted to run it by everyone and maybe get some insight as to how this should be configured. I am working on a project to send the traffic from our guest wireless out to a separate MX100 with a separate WAN connection.    Here is a description that I got from a cisco tech of what needs to be configured:   • ISP1 & 2 both come into the currently deployed HA MX pair. • ISP3 will come into a new MX (new public IP address) • new MX connects down to the core using a new VLAN (for example VLAN 500) and new private IP subnet • wireless APs advertise a new SSID using bridge mode and VLAN tagging to put the SSID on VLAN 500 • intermediate switch ports/stacks are configured to trunk VLAN 500 up to the core switch • new MX is configured to run a DHCP server on VLAN 500 • clients that connect to the SSID on VLAN 500 will access the internet through the new MX and it's public IP address • clients on VLAN 500 won't be able to connect to any other VLANs unless static routes are added to each of the MX deployments   I have the MX100 connected and added to my Meraki dashboard, with a subnet created with DHCP enabled for this VLAN.  I do not have the MX connected to our current network yet.  The network has the SSID created and is set to tag the clients as VLAN 500.   I am wondering about the connection between our current MS425 core stack and the MX100 that is being added.  I want to send only VLAN 500 traffic out a port to this separate WAN connection.  I am confused as to whether I should use a trunk port or an access port between these two devices.  And if i need to create an interface on the MS425 core stack or a separate static route?   Thank you! ... View more