@Merakibgp Those are the IP addresses of the Meraki Cloud. If you create rules you want to be sure you don't block access to those specific IP blocks as your devices will be unable to contact the cloud and you cannot manage them. ... View more

https://meraki.cisco.com/products/switches/ms120-48#tech-specs     ... View more

Oddly enough, @PhilipDAth, they do.  ... View more

Check that the MX isn't set to drop untagged traffic on its trunk port.   ... View more

And here I thought you just really liked books... 😉   You won't be able to do this for the last year... But if you use the Summary Reports page under Organization > Summary Reports you can pull 6 month intervals and add them together.      I'm not sure if this will do... But it might be as close as you can get. The other option would be to call Meraki support and ask them to pull that data for your fiscal year (I don't know if they can... But worth asking). ... View more

Very cool!   My last name is Portuguese... Does that count?   (I don't know how to speak it 😞 ) ... View more

Neato. I've also never heard of these. Very cool.   We use BiDi's in Meraki gear quite a bit, and those work just fine. It's possible that cSFP's will work too... I wish I had one here to test with.   Following this to see what the outcome is. ... View more

@WadeAlsup wrote: It's also interesting that your url bar shows https, but the error message shows that http is blocked.  That might be part of this actually...   If I browse to https://asos.com I am actually redirected to http://asos.com.  ... View more

Oh! And of course, read this forum! There are some pretty smart people here who are quite proficient with Meraki hardware.  ... View more

There's no books that I'm aware of. There are a bunch of videos, both from Meraki and not, on YouTube.    Honestly though, the documentation has most of what you'll ever need.   https://documentation.meraki.com/   You can also do the CMNO certification which is a good beginners course.   https://meraki.cisco.com/webinars/cmno     ... View more

@AlexanderDrago wrote:   What do mean about core ? Is this stacking ? https://en.wikipedia.org/wiki/Hierarchical_internetworking_model   ... View more

I agree with @Chris_M in that I don't generally use guards on trunk ports. Personally, I tend to prefer UDLD to LoopGuard on fibre links, but there are some differences there so the best advice is to read up on both and pick the one that best suits your use case.   Another good use for Root Guard is if you have a connection to switches that you do not manage, like a third party business partner.   ... View more

I always set a priority 0 on a root switch (provided the switch fabric is large enough to matter, or there actually are redundant paths. It's better IMO for the root to be deterministic rather than random). Ideally, I'll also set a second switch to 4096 if there's one in the fabirc that makes sense to be secondary.   For access ports I always set BPDU Guard.    I very rarely ever set Root Guard or Loop Guard.  ... View more

@Adam we might be talking about different things. Not a static route on the MX, but one on the gateway for the MX, whatever router that is. This way the rest of the network can reach the remote subnet.     @Dilkush123 Huh, if you have both things Adam and I suggested then I'm at a bit of a loss. Can you post up some configs of the MX? and maybe the routing table on the gateway? ... View more

If you don't already have one you'll need a static route on the Router that's the gateway for the concentrator that points to the concentrator for the VPN subnet.    So if your z3 clients are 192.168.100.0/24 then you need a route for 192.168.100.0/24 in your network that points to the concentrator.  Does that help? ... View more

Enter the device serial number as username. Leave password blank. ... View more

Yeh I'm sure there's a way to get this done, but you're going to have to handle all of the SMS stuff yourself somehow. Meraki doesn't have any tools to help you, all they offer is Twilio.    The ExCap config guide has some good info on what info goes back and forth, and what you need to send. It doesn't have any info on doing your own SMS ExCap specifically, but I would think it would have useful info to help you get it done.   https://meraki.cisco.com/lib/pdf/meraki_whitepaper_captive_portal.pdf     ... View more

Yeah you'll need to forward VPN traffic (UDP ports 500 and 4500) to the MX.   https://documentation.meraki.com/MX-Z/Client_VPN/Troubleshooting_Client_VPN#Other_Problems     ... View more

For reference, the actual post made by the guy who stumbled on this new method is here:   https://hashcat.net/forum/thread-7717.html   That is sensational headline free, and just the facts. But as everyone said above, grabbing a hash from a WPA(2) PSK SSID and brute forcing it is nothing new.  ... View more

So I'll take the stick-in-the-mud approach here and say that if you only have 20 users on site, then I would consider downgrading the Internet and not worry about getting a bigger MX unless you are maxing out your current device. Nerd bragging rights aside, it is wasteful to have an oversized Internet pipe and security appliance for such a small number of users. I would take this as an opportunity to save your company some money by correctly sizing the pipe and fw to the actual needs. If your 20 users are working with huge GIS-like data sets, or whatnot, then of course size according to that. But in most situations 20 users do not need a 500/150 connection, nor do they need a bigger appliance. ... View more

It's shared, not dedicated. It's not 100+250. The 100 counts as part of the 250 (at double the hit, so 100Mbps of VPN traffic counts as 200Mbps of non-VPN).   So if you have 1 VPN client that is conducting a 100Mbps file transfer you will nearly max out the MX and leave almost nothing left for anyone else.      ... View more

It's more of an aggregate really.   Let's say we have an MX that is rated for 2Gbps unencrypted traffic, and 1Gbps encrypted. If you were to, say, drive 500Mbps of encrypted traffic through it you would then only be able to get about 1Gbps of unencrypted traffic through it at the same time (not 1.5Gbps).    In our testing we've found that you can use the general rule of thumb of encrypted traffic counting 2x towards the total throughput of the box.      ... View more