Does this portal system integrate with the Meraki API in some way, or is it a box you put "in-line" and it does all the processing itself (so Meraki knows knowing about it)? ... View more

Hi @cocacond Did you manage to setup a non-meraki tunnel with ISR device. Can you share the script for ISR device to setup tunnel. Thanks. ... View more

going to steal some of these tips, didn't know some of them ... View more

Ok, aquí vamos de nuevo!!!, Here we go Again!!! ... View more

Thank you, your link is useful for me. I just wonder why it sometime not switch from one rule to one rule not properly. sometime it match to general group policy, which is not the requirement. ... View more

Looking at those splash pages, I would say they are being done by a third party, not Meraki.  You can probably work out who is providing it by looking at the Splash page configuration in the Meraki Dashboard.   If it is a third-party provider, you'll need to log into their system to get the info.   If I had to take a guess, this looks like the handy work of Splash Access. https://www.splashaccess.com/  ... View more

I'm guessing EE have got IPv6 to IPv4 working properly then, which is good 👍 ... View more

HI all bro @Bruce @cmr @Bettencourt    Thanks for the comment  , The MX450 at DC , we just use Router for upstream ,  no firewall block. Internet direct to Router , then route to Meraki MX450.   like i mention , Meraki MX450 doing vpn concentrator , we only can use only 1 wan , can't use 2 wan like Nat mode. so i'm not sure this could cause the problem. ... View more

Hey @SopheakMang, I encountered the same issues when using templates today as well. I was using the 10.1.0.0/16 subnetteed out per site. I had been using 10.255.0.0/16 elsewhere. So it wasn't my first template like you described. However I think regardless the issue can be fixed by what I am about to explain.   The first step is to raise this with Meraki support. You will need to request them to enable the Loose Subnets feature. What this does is prevent the Meraki logic from checking whether you are using a subnet in the same supernet as 10.0.0.0/8. Of course, you still want some sanity checking by Meraki so ask them to enable the second feature which will verify if there is overlapping subnets within the 10/8 network. After these two features were enabled this, fixed my problem and I was able to assign my template with no issues. ... View more

@Nash So CDO does support Meraki native network objects as well, but you'll need a feature flag enabled to do this on CDO (please ask support if you'd like this).  Note: I'm a CDO developer. ... View more

@SopheakMangI think you should be okay if the DC MXs are in concentrator mode and not routed mode (this is how we operate them).  If your hub MXs are in routed mode with the internet on a WAN port and the VPLS on a LAN then I think I'd agree with @ww  ... View more

To be honest, I'd wonder if the data being aggregated and reported is statistically accurate. For example missing data points should not distort what is reported.   I'm not talking about Meraki, but I do know of another Bay Area networking hardware and software company that produces great looking charts, most of which are b.s., because the software developers have no regard for data science, database design, or statistics and drop alpha hardware and software of customers and let them find the problems. Checking the data is a low priority. Customers are mostly happy, they like dynamic graphics. ... View more

@RichardChen1 wrote: Check this out: https://www.willette.works/mx-warm-spare/ Yeh... There's falsities in that and I would not recommend you follow that guide. There are some good things in there, but the whole heartbeat thing is not truly possible and very misleading.  ... View more

I have seen before, that for some unknown reason, the SFP inserted to an MX, just crashed. Pulling it out, and reinserting the SFP made it come up again. Not sure if that's the case. Perhaps try that? ... View more

@CptnCrnch is your username a nod to the 2600hz whistle? Good catch @BrandonS! ... View more

Hi @KRobert,   And how about sending configuration through API? I've automation project related to Meraki MX Access Control and really appreciate if you've documentation about this subject 🙂 Note: I've already checked this document: https://developer.cisco.com/meraki/api but none of it has MX Access Control API (including GET & POST method) Thanks in advance ... View more

1. Regarding the retention Aaron Willette wrote an excellent blog post: https://www.willette.works/meraki-event-logs/   I don't know how up-to-date it is though.   Perhaps it's time @CameronMoody turns this into an official doc 😇.   2. Seems to me like only succesfull logins are logged in the event log. You can find them in Network-Wide > Event Log. Syslog provides more detail: Succesful connect and disconnect in green.   Connection try with a wrong username in red.   Connection try with a wrong preshared key doesn't seem to get logged at all.   3. Login tries to the local status page (not sure that that is what you mean) aren't logged. ... View more

Thanks all bro , for the solution and answer ... View more

Using Duo for Meraki Dashboard integration is a little bit more work.  First you have two deploy a Duo Access Gateway appliance (I usually deploy a pair because if you have one and it goes down you can't log in - and then I often use a load balancer to distribute the traffic over them although DNS round robin also works but you need to set a high TTL which then prevents fail over from working as well).   Then you need to configure SAML integration. ... View more

Woo hooo I made it to tier 3 🙂  Congratulations to everyone every tier! ... View more

You are right bro!!! ... View more

Thanks everyone , Seem got the solution now Thank you so much !!! ... View more

just keep it up guys , love you all ... View more

Great day , Everyone Enjoy your day!!!   If you think that Meraki is Great , Just give me one KUDO 😅😅.   Don't take it too serious , I'm just joking 😊 ... View more

Non Meraki VPNs use ESP tunnel mode encap. However Meraki VPNs encrypt their packet directly under UDP. Screenshot below, mind that 10.10.10.x is the actual WAN IP of the MX but it's behind a NAT.   ... View more