Thanks.  ... View more

Would be nice to see the network_id in the Dashboard. Meanwhile, you can see it in the source code of the page. Search for Mkiconf.locale_id = "123"; Mkiconf.ng_id = "123";   Some Networks have both, some only one of them. If you have locale_id then your network id is "L_123", and if you have ng_id, your network id is "N_123". If you have both, you can use both.   ... View more

Hi ServiceCI After I spending some time on this I decided not to use Knox. I set my devices as the owner and use a Block List. I find that I can block all the other garbage that is loaded from the device. Once you set up a block list all system apps and preloaded apps are allowed to run. I use a android app called package names to get the item names to block and put them the block list. That will stop all the items you don't want or don't need from loading. Then what ever apps I want them to have other than the system apps I just add them from the playstore on the manage apps screen   Here is a copy of my block list      ... View more

I don’t have the mx64 for the gig FiOS.  I’m running an MX250.   But the way I have it setup Is as follows.   ONT to MX250 via Internet port 2 (home connection)   On one of the lan ports I have assigned a VLAN 80 with DHCP enabled with the following range: 172.16.80.0/28 and have that port plugged into my WAN port of the FiOS router for the TV portion to work.   make sure you do not assign a 192.168.1.0/24 as it will conflict with the FiOS router internal network.  And then you can configure the VPN using the dynamic DNS name of the meraki.     ... View more

As pointed out, unclaim and RMA as quickly as you can. ... View more

will the specified "Exit"-Hub also advertise a default-route via Auto-VPN to another "normal" Hub which has the checkbox set automatically? because I´m facing the issue that the default-route is active on the spokes but not on the second hub in the network 😕 ... View more

Hello @SmitBhojak! Welcome to the Meraki Community! It is a great community to be a part of and we are glad to have you here. ... View more

may be is an spare item, because the equipment also needs power cables.... and if its only the hardware what he needs... i assume that he will use the power cable and license like if it was an RMA.  Hope so ... View more

@AndreaWimsatt I'll PM for your new address! ... View more

@KCM  i haven't indicated anytime on my dashboard and once i login i can stay even more than five hours    i dont know the exact time you will be logged out but i can assure you you will remaine login for long                                   ... View more

righttttttttttttt it totally skipped my mind, thank you this worked  ... View more

Yep, it is a brand new MV12 which came with 4.8 on it. Do you have a Case-Number? I'll open another one tomorrow... ... View more

@merakichampThank you for that info. I have a follow up question though. In MX's documentation it is written : "When using an MX as a site-to-site VPN peer, it will only be able to send client traffic over the VPN tunnel if that traffic has been directed to it. As such, a router or L3 switch on the network will need to have static routes configured, such that VPN-bound traffic is sent to the MX. This traffic will then be encrypted and sent through the site-to-site VPN tunnel. Traffic bound to the Internet or other destinations will simply pass through the appliance:"   Let's say that I have that kind of topology Internet -Edge FW - DMZ - MX L2/VPN concentrator - Router - LAN   if I have a layer 3 functionality to ensure routing, if I set the MX in passthrough mode, is it possible for it to deal with S2S VPN, Client VPN AND to still pass all internet traffic (incoming and outgoing) through the MX using filtrering, IPS and AMP functionalities ? if it's not clear, i can ce more specific. thanks for your help. FrederiqueC   ... View more

I don't have plan to buy another MR33. I am the admin of the account where I claimed my device but when i deleted the first network in my dashboard its all gone. So the device is useless because i can't even manage the Ssid. Lol I thought I can revert it to default when I made a mistake in configuration because I am the admin but it just my thought lol ... View more

>- When a failover occurs a GARP is not sent for the 1:1 NATs therefore in the case of a failover anything that uses our 1:1's stop working   I haven't run into this issue before.  I'm guessing whatever upstream device you are using is requiring this.   >- The hit counters on the firewall rules don't work.  I have verified this and also have confirmation from tech support.   Agreed.   >Client VPN.  There isn't a way to apply different rules to users since you can't assign a static IP to a VPN client and the MAC address is not registered on the firewall so you can't apply a group policy to it.   Negative.  I do this all the time.  You get the user to VPN in once (I typically do it myself the first time to test everything is working and they are getting the correct access), and then apply the group policy to that connection.  The group policy is applied against the user, not any MAC address in this case.  Then you use group policy firewall rules to control what they can access.   >No way to positively verify that firewalls rules are working as intended.   Agreed.  I wish this was better.   >Failover order doesn't make sense.  At least not to me.    I guess this is a matter of perception.  The idea is that the warm spare does not kick in unless the primary unit has failed.  That can either occur because the physical unit has failed, or it has lost all connectivity to the Internet. Typically you connect your primary circuit to both MX units, but this does require a routed /29. In your case, you should plug your two best circuits into your primary MX, and your backup circuit into the warm spare.   Ageed - they are difficult to use a DC style environment.  They have a particular vertical feature set, and they work great in that vertical.  Once you start going outside of that things get tough or you have to make compromises. ... View more

Thanks everyone for all the imput..was afraid of that but had to try. I can use it as a door stop.   ... View more

Yes, please.  Stop the license madness now. ... View more

@merakichamp Thank you very much for your reply. Your screenshot saved my time. ... View more

Also check out this repository of automation scripts: https://github.com/meraki/automation-scripts    In particular, this one can migrate Catalyst 3k switch configs (3750, etc): https://github.com/meraki/automation-scripts/blob/master/migrate_cat3k/migrate_cat3k.py  ... View more

Well done @Network-dad  and @DarrenOC ... View more

@redsector  it is only available for per device licensing and has to be applied to a complete network within an organisation. ... View more

Yeah I noticed, but luckily there is another way. I went to to switch -> switchstacks and over there you can create the L3 interfaces.   Thank you all for your help, much appreciated! ... View more

@BernhardLang  yes it does    see below documentation  https://documentation.meraki.com/MS/MS_Overview_and_Specifications/MS410_Overview_and_Specifications ... View more