Ok, that makes much more sense, though I still seriously doubt the legitimacy of this reboot requirement. Two fairly simple options that involve slightly more downtime but should work even with your older APs:   1) If these sites can be down for ~30 minutes instead of the length of a reboot, I would simply use Port Schedules to disable the ports with access points for 30 minutes every night, which should then show up on the Device Connectivity bar if you want to double check it visually. This has the added benefit of being entirely done in the Meraki dashboard and not needing your batch script any longer.   https://documentation.meraki.com/MS/Access_Control/Port_Schedules   2) You could reduce this to ~5-10 minutes by having your script disable PoE on the switch ports, then 5 minutes later enable PoE on the switch ports, this would still bring it down long enough where it should show up on the connectivity bar. ... View more

Tell your project engineers to configure inbox rules so they only see the projects they care about. ... View more

So your access points are being restarted weekly, but you don't know when it happens? Why isn't this simply automated, or given to the same person every week as a checklist/runbook item? Have you tried troubleshooting at all with support as to why you "need" these weekly restarts? ... View more

I would very much recommend against attempting to block instant messaging outright, for two reasons.   1) Telegram by itself does not expose students to adult content any more than Whatsapp, Discord, Facebook Messenger, or any other instant messaging platform.    2) In my experience, when you get heavy-handed with network restrictions in this manner you will not actually prevent the behavior you are trying to stop, you will instead push clients to download sketchy alternative apps that are less safe/less moderated or to VPNs, or they will just switch to cellular data.   It is my belief in general that you are much better off having the apps allowed but categorizing the traffic with NBAR and having some record that the clients were using the app if an incident occurs (in case they delete the app/wipe their phone, etc to try to pretend they weren't part of some incident) ... View more

The library will retry 5XX errors every 1 second until the number of retries specified is exhausted. Exponential backoff would likely be better, but there is -something-     # 5XX errors elif status >= 500: if self._logger: self._logger.warning(f'{tag}, {operation} - {status} {reason}, retrying in 1 second') time.sleep(1) retries -= 1 if retries == 0: raise APIError(metadata, response)   ... View more

I don't believe there is a good way to do this through the Meraki API, I would recommend instead looking at doing this through Event Viewer logs with AD and/or NPS or integrating a SAML authentication solution like Azure AD that would give you this visibility plus extra security features. ... View more

Is this something you are willing to spend PS dollars on or just trying to work your way through? ... View more

Just like how your script can enable and disable them despite that not being in the dashboard, you can tag them with the API. On an MS410, the stack ports are 19 and 20 so.... >>> dashboard.switch.updateDeviceSwitchPort('Q***-****-****',20,tags=['no_auto_shut']) ... View more

What I would do personally is use a tag on the port to exclude them, personal preference I find tags a bit cleaner, more portable and they help me remember what automations are running or not running on a port/device/network.   if total_usage_kb == 0:   x = dashboard.switch.getDeviceSwitchPort(serial,port_id)   if "no_auto_shut" in x['tags']:     print('Port {} on {} tagged with no automatic shutdown, skipping'.format(serial,port_id))   else:     dashboard.switch.updateDeviceSwitchPort(serial, port_id,enabled=False) ... View more

Who will be using this automation? Just you? Your team? Other teams within the business? If you are exposing it to others, how will you manage access to this solution?   What automations are being created (config changes, monitoring etc.), how frequently will they need to be ran, and what types of user inputs are you expecting to handle? Is CLI an option, or is a web GUI required? The moment you introduce a web GUI you are significantly upping the complexity of the solution.   Do you need any specific outputs, such as CSV/PDF/email reports etc?   Roughly how large is your environment?   ... View more

I'm fairly confident this is because the MX platform does not have this capability at all right now. Try to get uptime via an snmpget or Cacti or some other SNMP monitoring tool, it will work for MS but for MX it just isn't there. ... View more

Assuming you have the Advanced Security license, SNORT + Content Filtering will be your friends here.   https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Threat_Protection https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Content_Filtering   ... View more

How many sites are we talking here? Also, the point of Meraki is to make things like this "easy", you are largely defeating the point of it with these custom solutions of yours. Performance-based routing with a vMX in AWS/Azure would give you by far the best failover experience and is very set-and-forget, SD-internet after that is not bad but pricey, or for little/no cost you could run an API script somewhere constantly monitoring the connection stats for the MXs and fail over the WAN uplinks as you please. ... View more

This is similar to asking why have 48 gigabit ports on a switch if you only have 4 gig uplinks...even if your uplink won't do the entire capacity of the switch the technical specifications and port connectivity still matters.   Also "It's just sad that a $350 device can't do a gig."  umm no, you are not anywhere in the right price range for enterprise routing hardware...Meraki's -entry level- gigabit firewall (MX75) is over $2000 USD list price last time I checked ... View more

This is almost certainly due to the sizing guide being updated to reflect the performance improvements of MX18.2 firmware, which it probably shouldn't have been yet considering 18.2 is not yet stable. Also, I wouldn't necessarily put my faith in those performance numbers quite yet even with 18.2. ... View more

vMX is probably the simplest way, and I suspect there is a way to give it a static IP even if not to the resource directly...you could also co-locate a physical MX in a datacenter, use it as VPN hub for emergencies. Third option off the top of my head would be to provision a Windows Server VM in Azure with a public IP, give it a Terminal Services license for more than 2 concurrent users, and have people RDP into that in an emergency to access the dashboard. For extra security, you could use Azure's Bastion Host feature to have people access the VM through Azure authentication in a web browser instead of RDP.   [edit] The last, and least recommended option would be, if you don't have API access ACL'd, you could use an API script to remove the dashboard IP restrictions temporarily in an emergency.   ... View more

Is this just for you, or is this for more than one person? And is it a temporary or long-term solution that you need? ... View more

Insight will give you alerts for WAN2, you could purchase one license just for this trouble site. Or, run a Python API script somewhere to generate a custom alert for this site for you. ... View more

It certainly does stand out in comparison to prior firmware, looking at about 80 access points on MR29.5.1 they have collectively used less than 3.5gb of traffic in the last day to those destinations, with the highest AP at about 150mb.  ... View more

Looking around in some of my networks and so far this appears normal for an AP on MR30.5 ... View more

Then I would get a case open with Meraki support asap, get on the phone with them and have them examine the MX logs while it is happening, they have access to significantly more information than what is presented through the dashboard. ... View more

By any chance do you have Bonjour Forwarding configured in any of those sites? ... View more

Please define what you mean by "impacted" ... View more

What I *could* see is maybe some integration of Broadsoft or Webex Cloud into the Meraki Dashboard since they are going that route for switches and APs, and maybe some of the Cisco MPP style phones getting a Meraki branding/mode that makes them super easy to deploy? It would be convenient, but I'm not sure there is enough of a business case and profit margin for Meraki to go after in this market segment anymore with the prevalence of cellphones and softphones. ... View more