Hello @Fabian1    Sorry that I missed the German language part in your post. German is also an available language I see in the Splash Language Setting.   Let me know if you have any questions.   Regards, Meraki Team ... View more

Hello @Airneil    I only suggested that step as the Payload pushed through the dashboard is not working, according to your comment. That step will categorically tell us if its an issue with the device or the dashboard config.   Regards, Meraki Team ... View more

Hello @Airneil    You would need to do is create a .mobileconfig profile via the macOS Server app and then push it out to the users via System Manager > MDM Settings > Add Profile  > Upload custom Apple profile. Then moving forward, you just need to create a new profile each time there is a program/app that runs into the System Extension Blocked error when there is an attempt to install.   You can definitely create these config profiles in the macOS Server app ($20 in the app store), under the Profile Manager section.   Let me know if you have any questions.   Regards, Meraki Team ... View more

Hello @docwindprod    The DEP Sync failure could be due to the expired DEP Token or due to some issue on the Apple Servers while you were trying to Sync. But the re-enrollment due to non-compliant push Cert is due to an expired APNS Cert on the Meraki Dashboard. Both are two different issues. Please check the KBs I linked and let me know if you have any questions.   Regards, Meraki Team ... View more

Hello @alaminr01    Unfortunately, it is not possible to get the Serial number from the MAC address. Instead, just claim the Meraki Order# in the Organization -> Inventory page when none of the devices/licenses from the order are claimed individually. This would claim all the devices in the Inventory page. You should be able to see the MAC Address and Serial number columns for the devices.   Let me know if you have any questions.   Regards, Meraki Team ... View more

Hello @jdsando    Depending on the device platform, some end clients donot open the splash page automatically. Did you try and open an HTTP website on a browser on that phone and see if that got redirected to the splash page? cnn.com or espn.com are your best bet.   Let me know if you have any questions.   Regards, Meraki Team ... View more

Hello @dufour_francois    Unfortunately, the option that you are asking for a few users to be authorized with time restrictions and some without is not possible even with the APIs. In order to achieve this, I would recommend either using an AD Server or Radius Server for client VPN auth so that you can configure the policy for time restricted access on the server when any user tries to authenticate.   Let me know if you have any questions.   Regards, Meraki Team ... View more

Hello @ammahend    I have checked with our team and the expected behavior for MAB is that the AP would send a Radius Access-Req for each association. So, when the client disassociates and associates back, it would be treated as a new connection and a new Access-Req would be sent to the Radius Server.    This KB gives a detailed account of what the process is and how the ISE is recommended to be configured. Please confirm that the settings on the Server are as per recommendations just to rule out a config issue. If this continues to happen and you would like a change in behavior, I would recommend opening a support case so that we can give a more definitive answer based on the logs collected from your organization on the dashboard.   Let me know if you have any questions.   Regards, Meraki Team   ... View more

Hello @CL    I checked the our documentation and I don't see any details on removing such Prepaid Cards. Could you open a case with Meraki Support so that they can look at your specific Org and see how to proceed from there?   Let me know if you have any questions.   Regards, Meraki team ... View more

Hello @dufour_francois    This is unfortunately not a feature that is currently available. I would suggest submitting a feature request using the Make a Wish button on your dashboard.   For a work around, you can automate an API script to deny UDP 500 and UDP 4500 traffic using firewall rules during the hours where you do not want the Client VPN feature to work and allow it for the rest of the hours. Let me know if you have any questions regarding this.   Regards, Meraki Team ... View more

Hello @vassallon    Thank you for sharing the details. Looks like this is something that needs to be investigated by our internal teams. Please do share any update you receive on this thread so that we keep the community upto date.   Let me know if you have any questions.   Regards, Meraki Team ... View more

Hello @Birdn    The way to force a local user to setup passcode is to push the profile with Passcode Payload. Unfortunately, if the user forgets the passcode, it is not possible to recover the password to change it to a specific value through the Systems Manager Dashboard payload. The dashboard only pushes the allowed settings to the Macbook. If it needs to be recovered, you have to follow the processes prescribed by Apple as the Macbook needs to be logged in and connected to network to even be able to pull settings from the dashboard.    https://support.apple.com/guide/mac-help/reset-your-mac-login-password-mh35902/mac   You can however, use filevault option to setup a recovery key and be able to recover the data from the device.    Please let me know if you have any questions.   Regards, Meraki Team   ... View more

How long was that session/flow active for ... View more

Hello @Kausik    The Traffic Analysis gives the Applications / Website information for a client overall. But the dashboard does not store all the specific flows for all the websites visited. It only stores the flows that are visited in the past hour/day/week/month.    If you would like to track each flow and need specific timestamp with hour/second information, Syslog server should be way to go.   Let me know if you have any questions.   Regards, Meraki Team ... View more

@jsurles The local status page can be accessed by anyone onsite. So, if possible, try and get remote access to one of the computers onsite and you should be able to access mx.meraki.com   If this is not possible, you can also open the Local Status Page over internet, provided the MX has public IP or Port Forwarded on the ISP Modem. This is done at Security & SD WAN -> Firewall -> Security Appliance Services.      ... View more

The out-of-order packets are dropped in any firmware 14.36 or later. That specific bug is fixed in 15.23 beta firmware. But, our support team can check the logs and confirm whether you are hitting this issue or not.   Regards, Meraki Team ... View more

Hello @MarkiP,   From your description, it is possible that the MX is dropping the packets before forwarding on the WAN. Our support team needs to take a look at the live flows and logs from the MX when the issue is happening. I would suggest opening a support case to work on this.   My initial thoughts indicate this could be due to out-of-order packets being sent on the MX LAN and causing the packets to be dropped. Let me know the MX firmware on which you saw this issue.   Let me know if you have any questions.   Regards, Meraki Team  ... View more

Hello @Americana-Merak    On the Meraki dashboard, we can configure 15 SSIDs but it is recommended to not use more than 4 SSIDs per AP at one time. You can, however, configure 6 and it would still work, though it's not recommended. I am not sure what you mean by "users have to access with their registered MAC address". A MAC address is a physical/burnt-in address of any device that the user has. They always have access to the MAC address.    The coverage of the AP depends on the physical environment in which the APs are placed and also the direction of the Antennas (depending on the model). The recommendation for Omni-Directional or Directional Antennas can be made after a site survery. The same applies to the AP's model recommendation.    Check out some of the documentation that would be helpful -    https://documentation.meraki.com/MR/WiFi_Basics_and_Best_Practices/Multi-SSID_Deployment_Considerations https://documentation.meraki.com/MR/WiFi_Basics_and_Best_Practices/Channel_Planning_Best_Practices   Let me know if you have any questions.   Regards, Meraki Team ... View more

Hello @Waheed-Ali,   You can script the code however you want using the API Endpoints provided and the result can be loaded to any website or application that you desire. You would basically need the API Key generated on your profile and have the administrative privileges to run them.    I am not sure how the scripting would work on SharePoint. I used python to write a simple script of my own to use these API Endpoints and play around. Take a look at it.   Let me know if you have any questions. https://developer.cisco.com/meraki/   Regards, Meraki Team ... View more

Hello @FodFar,   The stacking related issue is resolved in MS11.29. The firmware MS11.30 is the same version as MS11.29 with just added support for MS390 switches. So, it was immediately bumped to be a Stable Release candidate.    The bug you are talking about is resolved in 11.29 and subsequently in 11.30 also has the same fix. So, please feel free to upgrade the switches. If you are not confident, please give a call to our support line and a support engineer can pin the firmware on a test stack where you can monitor the performance and decide to upgrade the entire network(s).   Let me know if you have any questions.   Regards, Meraki Team ... View more

@SoCalRacer First of all, I appreciate the effort put in to get the list of steps.    We also have a detailed KB Article that lists the steps, error codes and their meaning that would help us in troubleshooting the Client VPN connectivity problems. If you see anything missing in the KB, please do submit a suggestion on the dashboard using the "Make a Wish" button and we will be glad to take a look at it.   Let me know if you have any questions.   Regards, Meraki Team ... View more