Looks like it will happen 🙂 Products - Cloud Management for Catalyst FAQ - Cisco ... View more

We also need this "feature" for the same scenario, sadly I can't find any solution with Meraki MX. On Cisco ASA this is a basic NAT command and not such a special think, don't understand why MX is not able to do this. 😞 ... View more

It's 2024 as I find this post and I don't find this ability but could make great use of it!  To me, if the Traffic Shaping Rule simply added a new "flow pref" action things would be great. ... View more

Yes redirections of NTP requests are possibles as you say but only for clients. Meraki's devices are forced to resolve NTP requests with pool.ntp.org https://documentation.meraki.com/General_Administration/Other_Topics/Upstream_Firewall_Rules_for_Cloud_Connectivity ... View more

Yes it will be added and the GUI in dashboard will even feature a graph over time for all the values (RX, TX, temp, current). ... View more

I have now created another work around for my issue - collecting MT Sensor information. Using POSTMAN and API GET queries. This was a great place to start however. ... View more

I have the same problem but I can not find a solution ... View more

Same question, i'm searching for an API that is able to detect master/master, or split brain status. The workaround mentioned does not work for this. ... View more

It's unlimited by defaut but if you are using splash page then in dashboard select network -> Wireless -> Access control (select SSID) -> Advanced splash settings -> Simultaneous logins -> select limit to one user at a time (or) Allow simultaneous devices per user.   ... View more

Sorry to reopen this thread, but I want to see if I understand how UDLD and STP guard should be set up on my topology. Here's the high level image from the dashboard. Very simple hub-spoke. Single uplinks from IDFs (either a stack of two or just a single switch) run back to MS425. Do I enforce UDLD and loop guard both ends, or just the uplink port for the IDF?   ... View more

Hi @SLR,    As stated earlier, it would be advisable to confirm that your DHCP server is receiving the DHCP Discover messages, preferably via packet capture. Once that is confirmed, you could take a few additional captures from the DHCP server back down to the AP to determine if the DHCP messages are getting back to your client, and if not, where they are being dropped. You can then focus your troubleshooting efforts at the last hop the DHCP communications are seen.  ... View more

This report no longer provides "Number of sessions over time." Is there another solution to getting number of sessions? ... View more

Did you get this solved? I can't figure out how you allow Social Media sites at multiple time windows in each day.  As best I can tell you can only set one time range per day per GP.  I don't see anyway you could allow Social media during breaks & lunch within the same day (e.g. allow facebook access from 10:30-11am and again from 1pm-2pm)? ... View more

Manual IP Blocking: As you mentioned, manually adding known mining IPs to a custom category can be a workaround. Regularly updating this list can help, although it requires constant vigilance to stay ahead of new mining sites. Pros: Direct control over specific IPs, relatively straightforward setup. Cons: Labor-intensive, may not cover all mining sites, requires ongoing maintenance. DNS Filtering: Use the Meraki MX's built-in content filtering options. While you might not have a specific category for crypto mining, you can block access modification. to known mining domains by configuring custom DNS filtering rules. Pros: Blocks access at the domain level, easier to maintain than IP blocking. Cons: Might not catch all mining sites, effectiveness depends on the accuracy of the DNS filtering list. Third-Party DNS Filtering: Consider using third-party DNS filtering services that specialize in blocking malicious or undesirable domains, including crypto mining sites. Some of these services offer free plans for basic usage. Pros: More comprehensive domain blocking, regularly updated lists, usually user-friendly. Cons: Might require additional configuration, some services might have limitations on the number of blocked domains in free plans. Regularly Updated Blocklist: Utilize regularly updated blocklists specifically designed to block crypto mining sites. There are community-driven lists available online that you can incorporate into your Meraki MX configuration. Pros: Community-supported, regularly updated, covers a wide range of mining sites. Cons: Dependency on community updates, might require technical expertise to implement. Consider Upgrading the License: If blocking crypto mining sites is crucial for your organization's security, consider upgrading to the Enterprise Umbrella license or a similar advanced security license that offers more comprehensive content filtering options. Pros: Comprehensive content filtering, dedicated support, ongoing updates. Cons: Additional cost, might require budget approval. ... View more

I’m fully aware of when the thread was created, thanks 🙄 my response is valid and stands. Don’t try to force speech on me ... View more

Meraki also uses a public IP in the NAS field when AP's and Switches probes the radius server to see if it is alive. Meraki also uses public IPs for BGP router ID's when enabling BGP and for the APs when they are in mesh.   It's really strange to see these public IPs show up at seemingly random places. ... View more

(From a distant place) Currently, my Internet connection is over 5G "Mobile broadband". There is a lot to like about it, but, many ISPs use CGNAT, (for reasons of unplanning and economy), this causes high latency, fortunately, I don't play computer games where this matters. Apparently it makes many online games unplayable, without some "jiggling around". Predictably, ISPs that use CGNAT are in denial. Allegedly the problem doesn't exist if the WAN interface can be configured to use IPv6 whilst leaving the LAN side IPv4. ... View more

Hm, what do you mean by 'pull client Wi-Fi connections'? ... View more

I stumbled across this thread while looking for a solution to a similar need.  For the sake of anyone reading this in the future, I wanted to share another solution that I found.   ...from the official Meraki github account... https://github.com/meraki/dashboard-api-python/blob/main/examples/aio_org_wide_clients_v1.py   This script iterates through every Org to which your API key has access and through every network in each Org, then it saves a CSV of the clients in each network and finally, compiles all of the client CSVs into one file containing all the clients in all the networks for that organization.   I hope this helps! ... View more

I guess nothing has changed in 4 months? since @JohnT's message? ... View more

Use the GPON as dumb transport only. Tunnel the APs back to an MX on the OLT side...   several options...       ... View more

Cool contest! ... View more

Thank you for helping me out as well. I appreciate you. ... View more