Thanks for your answer !  ... View more

If you think I helped it would be great if you could give me some Kudos. ... View more

I've only ever done it using Windows machines, which allows you to do it via group policy.   If you are using PEAP/MSCHAPv2 and you use a public certificate on your RADIUS server (that matches its domain) then you don't need to deploy any certificates to devices, ... View more

If you think the information I supplies was helpful it would be great if you could give me some Kudos. ... View more

thanks for the advice, i had taken a look at the documentation and wanted to see if there was anything automated i could do. ... View more

Yeah will probably try that Monday. We are also going to call the ISP.. not that I think there is anything on their end, but just worth checking.  ... View more

As earlier said; The roaming choice is decided on the client device itself which mainly is based on beacon frames and probe requests. Refer to the following document which outlines this in more detail and recommendations to weak these settings on a client device -decision https://documentation.meraki.com/MR/WiFi_Basics_and_Best_Practices/Client_roaming_and_connectivity_decisions_explained  ... View more

  I'm in a similar situation.  I'd like to either have the user be prompted for their username / password or allow me to use the Owner that is assigned to the device in Systems Manager.   The only way I can make the wireless profiles work is to hard code a username and password. ... View more

Thanks for all the help, There is a window this weekend and will perform this then.      ... View more

There has been a nagging bug where content filtering was based on IP, not DNS - so it would block servers hosting many websites. Could have been related. ... View more

I would also suggest getting a professional wireless site survey performed.  It's not just the interference from your own devices that needs to be considered, but also that coming from neighbouring AP's in nearby building/office floors.     I have found in the past that the Meraki auto ordering of channels does not always work as well as it should, and manually setting them can prove more successful.     As always proper planning prior to deployment can aleviate problems further down the line. ... View more

You don't need to rely on humans to help them.  ... View more

I seem to have lost of first reply, so here goes again.  I'm going to assume your MX84 WAN interface is statically addressed rather than using something like PPPoE.   Your options include: Get a spare switch.  Plug your Internet circuit, MX WAN port and the router into it. Use an existing managed switch.  Created a new VLAN.  Put three ports into it in access mode.  Plug your MX WAN port, Internet circuit and router into it. Ugly.  On your MX create a new VLAN.  Assign it a random subnet that is not in use.  Put three LAN ports of your MX into this VLAN in access mode.  Plug your MX WAN port into one of these MX LAN ports.  Plug the Internet circuit and router into the other two ports. ... View more

You can whtielist devices that connect to the wireless, which will also remove the splash page for them. That's what I would try first anyway.. ... View more

There is a protocol called "Energy Efficient Ethernet" which changes the port speed down down when idle to reduce power consumption. https://en.wikipedia.org/wiki/Energy-Efficient_Ethernet   You may find your devices support this and have it turned on. ... View more

I am pretty sure he used the Wireless only - VLAN  field to tag a VLAN. but khurram it's like Philip said, you cannot use Group Policies to shape traffic on a port.   Group policies define a list of rules, restrictions, and other settings, that can be applied to devices in order to change how they are treated by the network.  So you will have to add the Group Policy to the specific device behind the port.    Go to Monitor => Clients  Search the Client you want to apply the group policy on and under the field Policy you can click on the word "normal" and select a Group Policy for that specific device.   Hope this helps!   Regards, Ben ... View more

Join Apple's DEP program to have full control ... View more

Thanks for responding. Yes I mean the MX100, apologies. I have upgraded to the latest Beta firmware, this has not resolved anything.   Firstly, the below is a speedtest from a server connected to the Meraki and then a fibre line.  As you can see, the download portion of the update seems to be reporting down and up. The upload seems to be working fine. When I go to client usage, this is what is displayed (This is a fresh setup)   Traffic analytics shows usage of about 25mbps over a 1 hour period(roughly)     All three display different results, the only reasonably accurate one is the Live feed, and that worked more effectively when using the original firmware. I have the same experience with the Z1. ... View more

i'm not arguing just to argue, i'm trying to provide a view that isn't often discussed or considered on how usernames and credentials can be made more secure which is the root of the whole post, making a users login harder to know.   of course the more entropy you add to a password makes it harder to guess, i've never said otherwise in any of my statements. what i'm trying to say is that allowing special characters is not the only way to make a login more secure and shouldn't be considered a requirement. ... View more

TLS is an encryption transport system, and is not required if you are just doing authentication.  TLS is most commonly used for encrypting TCP (and sometimes) UDP connections (aka transport layer protocols).   IPSec does not require TLS but can use certificates for authentication. ... View more

@FRanky wrote: Do we have any indication where is the Meraki dashboard (and the entire engine) located? Within a Cisco facility? another ? What is the Resilience we have there? What happens if this site fails? Each dashboard shard (you can see your shard number when you log in.  nxxx) is backed up to a secondary cloud solution for fast recovery if necessary.  They have I believe 7 different cloud partners where shards can be hosted.  You can't choose where your account is, but it does have a highly available disaster recovery backup in case of disaster. ... View more

@MilesMeraki wrote: Hello @VRocha, I assume you are using "Top sites only" which is causing this behaviour? Have you tried changing this to "Full list"?  Second this.  I had a similar problem and changed the setting to full list and it fixed the problem, at least for us ... View more

Ah, yes. It's more than encryption as the AP needs to authenticate and hence needs a client identity cert.  Okay, well let's see if anyone has visibility into what signing algorithm is used on the AP certificate.  ... View more

I don't see any point in running all traffic through the ISR when the only thing it is processing is PRI voice traffic.  I would plug it into the Meraki switch using a single Ethernet interface.   You could even put the ISR and all the phones into a separate voice VLAN. ... View more