Hi,   We have an MX250 with 2 WAN connections and the load balancing setting enabled.   WAN 1 is a fiber with a lot less latency (1ms) and 200 down & 200 up. WAN 2 is an COAX with higher latency (10ms) and 650 down but only 50 up.   So when clients connect over the client VPN do I want them to connect by using WAN 1 static ip or do i give them the serveraddress assigned by Meraki and let Meraki do the loadbalancing? will it take the latency into account?   Any insight is much appreciated.   cheers     ... View more

Hi   We have about +-66 Z3's that we use for retail sites. They're being used together with MR42's or MR33's. +- 20 devices on a network.   For the past months (almost as soon as we started rolling them out over a year ago) we started to have problems with them.  They would go completely offline and stop 'responding' on all utp ports of the device. No green lights above the ports, no DHCP, no local status page, resetting didn't work.   I went through plenty of troubleshooting with Meraki Support to no avail. Cisco sending a new device with RMA is the only way to 'resolve' this.   So this week we reached 50% of failing Z3's quite frustrating and  disappointing. Our account manager let us know that in the firmware 15.36 this issue should be resolved. This is still beta so not very keen on upgrading just yet.   However i was wondering if other people are experience a similar problem? cheers ... View more

Hi all,   We are using Google authentication via splash page for our staff in our HQ.  this was all working (relatively) fine until we forced 2FA for all our users out for security reason.   now this is still fine for them to authenticate on laptops/macbooks but when they want to authenticate on an iphone that is also their 2FA device it will ask them to go to google mail app or text app to allow the login attempt. once they go to another app it stops the authentication process on the phone and you have to start from scratch, sending you in loops unless you try to connect without authenticating and then do the process in safari on the iphone which will not stop the authentication process when going to another app to allow the login. but obviously that is not something we can ask our staff to do.   I blame Apple for this.   anyhow i found a workaround that applies a policy based: The 'mobile device' policy then bypasses the splash page. and assigns the device to our guest VLAN so they have less access to the network since they don't have to authenticate.   Does anybody have another 2FA workaround or are there any flaws to this workaround?   thanks in advance, cheers ... View more

Hi all,   We have 1 SSID where users need to login with their 3rd party credentials of their Google accounts from the company. we're loving this feature since we can easily see who is on which device.  Tho the authentication method was broken on mobile devices because they can't confirm the 2FA on the same device that is trying to login on the splash page since going to gmail stops the logging in process on the splash page.  however that problem is going to be a different topic.   What i'm trying to accomplish is that our users only see the once splash page ever... not even after 90 days. I feel like i figured it out with a grouppolicy that i'm going to have to assign to each user after they have authenticated. The policy has the 'bypass' splash page enabled.    I was wondering if this is a good/safe workaround and also how long will Cisco Meraki remember the user that originally authenticated? will it be the duration of the splash page frequency (3 months) or will it remember it until we forget the client?   Below you can see what it looks like when a client authenticated and then when I apply the grouppolicy after.   any thoughts are much appreciated     ... View more