We are really hoping to use this as well in our business.  We're really trying to stay away from getting looped in to needing AD accounts for everyone, but we set up everyone with G Suite accounts.  We'd love to be able to use G Suite accounts rather than AD with Meraki ... View more

I agree it sounds like something is wrong.  We've always consistently pushed all of our MX's way beyond what they are rated for and they've always handled it like champs. ... View more

That's awesome!  That's got to be relatively new in the API, because it definitely wasn't there before.  Good to know!  Thank you!   @jumbalaya09 wrote: You can do this now through the api. {'interface': 'Cellular', 'status': 'Ready', 'ip': 'xxx.xxx.xxx.xxx', 'provider': 'xxx', 'model': 'xxxx', 'signal': 'csq 21,99', 'connectionType': '4G'}   Sorry forgot to include the API call GET /networks/[networkId]/devices/[serial]/uplink   ... View more

Perfect.  That's exactly what I'm looking for.   Thank you! @PhilipDAth wrote: This will get you pretty close.  Go: Organisation/Summary Report Make sure you are using the "new" version.  There is usually an option to switch in the top right hand corner.   You can now generate a summary part for the "Entire Organisation" for a specific SSID for a summary time frame.   ... View more

@PeterJames wrote: @robby_barnes - Did these devices show up in your Apple DEP Account? And did you use your main Apple DEP account or an Administrator account of the DEP account?   Good question.  I believe I was logged in with the owner account when I did it. ... View more

@BHC_RESORTS wrote: Not that I am aware directly from the dashboard. There may be something in an API call available, but I haven't looked through it all. Or if your cell modem has an IP interface, you could try that. Unfortunately I do not believe there is any way to pull this info through the API.  We pull all of the cellular info that we can through the API, and it only tells us if it’s connected, type of connection (i.e. 4G), model of modem, and IP. ... View more

Agreed, some additional documentation would be nice!   I tried this out today on several devices though and it was super easy and worked really well! ... View more

In the dashboard under “organization” you can choose “firmware upgrades”. In there select your networks, and you can upgrade them individually, as long as they aren’t on a template. You can also work with support for specific versions that you don’t see in the firmware picker. ... View more

@MerakiJockey505 wrote: I have had the unfortunate duty of having to reprogram and accidentally cloned switch as well as one that the configuration was unknowingly removed.  It would be nice to have a way to back up these settings both to the cloud as well as locally in case of emergency.  I had an issue a while ago, and support was able to pull logs to show what the previous settings were, although I would guess they would not be able to do that every time.  Not a very elegant solution though, I agree they should have a better solution.   In our organization, we decided to take screenshots of every page in the configuration, then we actually keep a GitHub repo with all of the versions in there, so we can track the changes.  Really not an elegant solution, but it works at least. ... View more

@FRanky wrote: Do we have any indication where is the Meraki dashboard (and the entire engine) located? Within a Cisco facility? another ? What is the Resilience we have there? What happens if this site fails? Each dashboard shard (you can see your shard number when you log in.  nxxx) is backed up to a secondary cloud solution for fast recovery if necessary.  They have I believe 7 different cloud partners where shards can be hosted.  You can't choose where your account is, but it does have a highly available disaster recovery backup in case of disaster. ... View more

@MilesMeraki wrote: Hello @VRocha, I assume you are using "Top sites only" which is causing this behaviour? Have you tried changing this to "Full list"?  Second this.  I had a similar problem and changed the setting to full list and it fixed the problem, at least for us ... View more

That is good to know that if you clone a network that is included.  Any luck on templates?  We don't usually clone networks but we do have a very large template for all of our locations.   @RodrigoC wrote: @robby_barnes wrote: @RodrigoC That does help, but it would be even better if that could be done for the organization, rather than a network.  Is there any way to do that for an org?   @robby_barnes   Unfortunately not.  =/   However, it's worth noting that if you clone a network, all manually added MAC addresses along with their applied policy will transfer over to the new network. If a new site that requires the discussed restrictions is being deployed, you should be able to clone the new network from a site that already has this policy implemented and simply add a default 'deny any-any' firewall rule to achieve the same configs.   Not quite an Org-wide config, but should help save some clicks when provisioning new networks. 😃   ... View more

@RodrigoC That does help, but it would be even better if that could be done for the organization, rather than a network.  Is there any way to do that for an org?     @RodrigoC wrote: @robby_barnes wrote:   @Mr_IT_Guy wrote: On almost all home routers, you can set up your network to allow only specified MAC addresses to connect. With Meraki, the device has to been seen first before you can deny it. Engineers I've talked to have confirmed this and we've put in several tickets on the matter. I'd like to be able to setup a Z1 so that it blocks all MAC addresses except for those that we specific without having to have seen the device first. Absolutely yes.  It would also be really awesome if you could set this at an organization level (or at least a template level) so that you can apply it across large networks very quickly. Hey @robby_barnes, Hey @Mr_IT_Guy,   I have good news for you. The behavior you describe can be achieved by using the Dashboard 'Clients' page (Network-wide > Clients).   If you look in the top right-hand corner of the Clients page, you will see an 'Add client' button ( image attached below ). Using this button, you can add clients using their mac address, individually or multiple at a time, and specify what policy you would like applied to those devices. If what you are looking to do is have all traffic denied by default and only allow traffic for any pre-added device all you need to do is the following: - Set your layer 3 firewall to Deny all traffic - Add the list of trusted MAC addresses to the client's page and set their desired policy to 'Whitelist' (if you don't want them restricted in any way) or to a specific group policy.   Hope this helps!        ... View more

Awesome, thank you! ... View more

  @Mr_IT_Guy wrote: On almost all home routers, you can set up your network to allow only specified MAC addresses to connect. With Meraki, the device has to been seen first before you can deny it. Engineers I've talked to have confirmed this and we've put in several tickets on the matter. I'd like to be able to setup a Z1 so that it blocks all MAC addresses except for those that we specific without having to have seen the device first. Absolutely yes.  It would also be really awesome if you could set this at an organization level (or at least a template level) so that you can apply it across large networks very quickly. ... View more

@Mr_IT_Guy wrote: Another feature I would like: The ability to run speedtests from the MX device. Meraki engineers have this capability so it's definitely possible. Currently the only speedtest available to us is our speedtest to a local MX device.   I spoke to our sales engineer about running speed tests from the MX, particularly through the API.  We are in a unique scenario where we are a retail chain with about 1500 stores across the country, and one of our partners requires that we do speed tests once a month to "validate" that we are compliant with their requirements.  It would be amazing if we could just write a script that did a quick speedtest via the API in each location (even if it just did one at a time successively) and reported back.   What they told me is 2 things.  The built in speed test on the dashboard was built to estimate download times for the devices from the Meraki cloud.  Once they had that feature in there, they decided to just make it exposed to the dashboard because there might be times where it's helpful, but it was never truly designed to be a full speed test.   Second was that they are concerned about adding more speedtest options in to these devices due to how easily you could use that to DDOS something, whether intentionally or otherwise.   A little frustrating, since it would be such a convenient solution for us to use, but to me it makes sense at least. ... View more

We do, yes.  Unfortunately it's usually our Tier 1 support that deals with the problems, so I'm not super familiar with the specifics on how it's used, but we have some of everything across our stores.  I rolled out the newer firmware and it resolved a lot of weird issues we had with ISPs, including Century Link lines, with PPPoE ... View more

Do you know which specific version of the beta firmware is required for this? ... View more

Our organization has about 1500 retail locations and several of them were having similar issues.  We updated to 14.7 for a while, and it resolved about half of the stores' problems.  We just updated to 14.11 this last week (which is the newest beta available) and it has been pretty solid.   We generally try to stay away from the bleeding edge betas since we have so many stores that it impacts, however 14.11 has been really solid for us so far, across several versions of MX's across our retail locations.   It is not available through the dashboard for self service yet, but if you call support they can push it out for you. ... View more

We have been using one for a few months now (much of the time while it was still in beta).  It has been really awesome for us.  We have about 1500 retail stores, and moved that to be our VPN hub so that AWS resources can VPN to all of our stores.  It has been a huge game changer for our organization.   We are also using it as our primary VPN between our main office and our AWS infrastructure now, and it has been really awesome for that too.  Much easier to set up than the direct VPN built in to AWS. ... View more