I setup a remote office with a Sophos XG firewall and Meraki MR45 AP.  The Meraki AP has a POE injector and is plugged directly into the Sophos.     We have two SSIDs broadcasted, one Corp WLAN via RADIUS server and a guest/mobile WLAN.  Users who connect to the Corp WLAN get an IP in the correct range and can pass traffic and connect to the domain controllers and corp network just fine.  There is VLAN tagging on the Corp WLAN.     However, when users connect to the guest/mobile WLAN, they get the correct IP from the IP range but they are unable to pass traffic.  The VLAN is tagged correctly.  The Sophos acts as the DHCP server, and the DNS it serves is set to 8.8.8.8 and 8.8.4.4.  When I check the Sophos firewall, I see the firewall allowing traffic.  When I check the logs I see DNS failures for that SSID.  However, I'm not sure if this is actually an DNS issue as I had the remote user try to access websites by IP address and it fails.     I don't have this problem at any of our other sites and the SSID for the mobile/guest network is templated from our other site.  One piece that is different at this site is there is no Meraki switch which is probably not the issue.   Also, if I disable VLAN tagging for the mobile/guest SSID, it puts it on the default VLAN (as it should) and is able to connect and pass traffic.  This obviously isn't what I want since it's on the corporate network.  Any ideas how to troubleshoot?         ... View more

I had a spare  MS225-48FP that we used for an office that we closed down here in the US.  I configured it and shipped it to our German office.  I had our consultant rack it and power it up with a Germany spec'ed power cable but the unit only has a orange light in the upper left (which includes a link problem) and none of the PoE ports light up when a device is plugged into them.  The MS225-48FP doesn't come online in the Meraki dashboard either (hence orange light) and I have verified the port that it is plugged into on our firewall is configured correctly.  There is no link light on that port either.  I did not have this problem with the device when I configured it in the US.  All the ports are enabled and none disabled.   Any ideas if there is some type of power issue at play?  Do I need some type of adapter to covert the power correctly?  I'm thinking that is the problem because even if the switch doesn't have a network connection to the Meraki cloud network, it would at least show link lights when devices are plugged into the ports, correct? (all ports enabled).   Thanks! ... View more

I installed and configured a new Meraki switch stack with 4 switches.  I know I can view all the ports in one view, but is there a view or an easy way to tell if a port is unplugged.   Basically I had a few printers misconfigured with the wrong VLAN and the quickest way for me to figure out which port on the switch was to take a picture on my cell phone of all 4 switches GUIs on the dashboard with the various states of each switch and then unplug the printer from the wall port and compare the pictures to see which port was turned off.   I know with Cisco switches and the CLI, you could type in a command and when you unplugged a device from a port, the CLI would display the interface that went down (or up if you plugged it back in).   Is there a GUI equivalent on the Meraki switches? ... View more

Environment: MS225-48FP, DHCP handed out by our firewall.  Layer 2 switching only, 802.1x with RADIUS on a Windows domain controller.   Due to the limited number of ethernet ports in the wall, some areas of the office have a non-Cisco switch that passes VLAN tags and have multiple Mitel phones with people's computers tethered to Mitel.   We have 3 VLANs, let's call it:   VLAN 1 (native VLAN) VLAN 2 (Voice VLAN) VLAN 3 (IT Only VLAN)    With our legacy Cisco sg500-52P switch, there was an option for "Multi-Session"  which allowed regular users who authenticated via 802.1x successfully to get onto VLAN 1 and for IT users who authenticated to be placed on VLAN 3. Phones are placed on tagged and placed on VLAN 2.   However, with the Meraki MS225-48FP I am unable to get this configured correctly via Access Policy.  If I select an access policy with Multi-Host or Multi-Auth users get placed on whoever authenticates first.  So if an IT user authenticates first, subsequent regular users get placed on the IT VLAN and vice versa.  Phones are tagged correctly and placed on the correct VLAN 2.   Is there a way to configure multiple devices, multiple VLANs, multiple users authenticating 802.1x on a single port? ... View more

Windows 10 laptops (with the latest patches), MR45s setup in bridge mode and DHCP is handled through the Windows domain controllers.  We have 802.1x enabled.  Authenticated Wireless users are put on a Corporate wireless VLAN.   We've been experiencing some issues with random users at random times (including myself occasionally) trying to connect wirelessly and will connect, receive the yellow "!" in the system tray and it will say "Connected, no internet"     I do not see the client laptop connected to any of the APs, but I do see in the event log the laptop from it looks like, being authenticated. Sometimes disconnecting and reconnecting will allow them to connect successfully, sometimes it won't.     Thanks ... View more