Hi,   I was wondering if it's possible to use Google Authentication to authenticate users for the client VPN. We're using Google Auth as wifi authentication which works ... allright. Not great experience on phones because with 2FA enabled on our google accounts it makes the phone go to gmail to allow the login attempt and then you lose the splash page for the wifi so then you have to go to the gateway ip in safari. not great but works fine for laptops etc.   Anyway I was hoping this would work for client VPNs as currently only Meraki auth, radius or AD are available. I want to avoid 3rd parties for radius services etc. I just want the same wifi auth in the client VPN setup.    Any ideas? Or am I asking too much from a €5k firewall? 😉 ... View more

We are using an MG21e and MX67 in a combined network.   Lan2 port on the MX is configured as a secondary WAN (Standby) and goes to a POE injector first before going into port 1 of the MG.   Over the last 3 months we've had the MG go offline 14 times and counting. (only started counting after we setup webhooks) Meraki support told me that it might be some blocked ports, but after checking with the provider they confirmed that there are no blocks or restrictions of any kind. When it's connected to the network it also seems to have a pretty good connection 66,3Mbps.   The really weird thing is that the connection loss seems to happen right around the same time. Same for it coming back online, happens around same time of day.   Anybody has any idea or other steps to take? Meraki support told me to call when I'm on site but problem is that this is in a retail location in some distant country that I not need to visit very often.   ... View more

Hi,   We have an MX250 with 2 WAN connections and the load balancing setting enabled.   WAN 1 is a fiber with a lot less latency (1ms) and 200 down & 200 up. WAN 2 is an COAX with higher latency (10ms) and 650 down but only 50 up.   So when clients connect over the client VPN do I want them to connect by using WAN 1 static ip or do i give them the serveraddress assigned by Meraki and let Meraki do the loadbalancing? will it take the latency into account?   Any insight is much appreciated.   cheers     ... View more

Hi   We have about +-66 Z3's that we use for retail sites. They're being used together with MR42's or MR33's. +- 20 devices on a network.   For the past months (almost as soon as we started rolling them out over a year ago) we started to have problems with them.  They would go completely offline and stop 'responding' on all utp ports of the device. No green lights above the ports, no DHCP, no local status page, resetting didn't work.   I went through plenty of troubleshooting with Meraki Support to no avail. Cisco sending a new device with RMA is the only way to 'resolve' this.   So this week we reached 50% of failing Z3's quite frustrating and disappointing. Our account manager let us know that in the firmware 15.36 this issue should be resolved. This is still beta so not very keen on upgrading just yet.   However i was wondering if other people are experience a similar problem? cheers ... View more

Hi all,   We are using Google authentication via splash page for our staff in our HQ.  this was all working (relatively) fine until we forced 2FA for all our users out for security reason.   now this is still fine for them to authenticate on laptops/macbooks but when they want to authenticate on an iphone that is also their 2FA device it will ask them to go to google mail app or text app to allow the login attempt. once they go to another app it stops the authentication process on the phone and you have to start from scratch, sending you in loops unless you try to connect without authenticating and then do the process in safari on the iphone which will not stop the authentication process when going to another app to allow the login. but obviously that is not something we can ask our staff to do.   I blame Apple for this.   anyhow i found a workaround that applies a policy based: The 'mobile device' policy then bypasses the splash page. and assigns the device to our guest VLAN so they have less access to the network since they don't have to authenticate.   Does anybody have another 2FA workaround or are there any flaws to this workaround?   thanks in advance, cheers ... View more

Hi all,   We have 1 SSID where users need to login with their 3rd party credentials of their Google accounts from the company. we're loving this feature since we can easily see who is on which device.  Tho the authentication method was broken on mobile devices because they can't confirm the 2FA on the same device that is trying to login on the splash page since going to gmail stops the logging in process on the splash page.  however that problem is going to be a different topic.   What i'm trying to accomplish is that our users only see the once splash page ever... not even after 90 days. I feel like i figured it out with a grouppolicy that i'm going to have to assign to each user after they have authenticated. The policy has the 'bypass' splash page enabled.    I was wondering if this is a good/safe workaround and also how long will Cisco Meraki remember the user that originally authenticated? will it be the duration of the splash page frequency (3 months) or will it remember it until we forget the client?   Below you can see what it looks like when a client authenticated and then when I apply the grouppolicy after.   any thoughts are much appreciated     ... View more