Hello    I was trying to improve the roaming on one of our SSID's (mobile POS tablets dropping connection as they roam around), enabling 802.11r protocol would help with this. However, the combo of that and WPA2 is unsafe.   Which authentication method is best to utilize the 802.11r benefits?    Thanks in advance. ... View more

Dear Community,   We have Active Directory enabled on our Meraki environment.    Before this, we gave VPN access via creating accounts for who needed it.    Now everyone with an AD account seems to have access to authenticate.    I have 2 questions -    How do we restrict which users can authenticate with this?   Can we use group policy to apply layer 3 firewall rules per "user"? (I can only see a way to do this per "client")   Thanks for your help in advance. ... View more

Hi,   I have an IP range that I block all local LAN from, so I had set up rules 9 and 10 below which have been working fine, denying all of my internal ranges and then allowing anything else. However, I have a situation where I need to allow a couple of IPs which are fixed to access certain IPs within the blocked subnets. So I set up rule 8 which allows 10.4.26.41 and 10.4.31.245 to access 172.16.11.18 the rule 9 below then denies the subnet 172.16.11.0/24 so that might be why its counteracting it.        Does anyone know the correct way to apply a configuration like this in order to suit my requirements?   Thank you in advance. ... View more