I'm not; it's not something that's scalable whilst trying to meet the criteria of the High Density Design Guide with a large environment and keeping SSID quantity to ~3-4. If I was to apply this principal to a network that I have in mind with the filtering between groups and subnets, I'd be up to ~10 SSIDs for user groups alone. No matter. I'll have to stick to RADIUS via something like ISE. ... View more

Thanks for the reply. I'm really looking to not use any other MDM than Microsoft Intune, this Cloud PKI, Meraki MR/MX/MS, and Entra ID - so in this case, although it's a big step in the right direction, I'm unable to achieve the outcome I'm looking for.  ... View more

Thanks for the reply. Appreciate the response. I had come to the "Assign group policies by device type" answer to get around this - so on the same page there. The information around the # of CAs is great, and makes sense how to create separate certificate chains for each SSID.    My only outcome to achieve now is assigning different groups to different VLANs - but that group is user based. If anyone has an outcome to work that into this solution that would be amazing. ... View more

Apologies, I didn't realise how detail lacking my message was until re-reading it now. I'll be more clear -    Assuming that I was to have performed the configuration outlined in this thread, and have successfully tied Azure Cloud PKI to an SSID performing Local Authentication via Meraki. My next thought is - how do I send "user-group-a" to VLAN-12 and "user-group-b" to VLAN-34. Or, how would I send "devce-group-a" to VLAN-56 and "device-group-b" to VLAN-78. As it stands, I use ISE (or any RADIUS solution tied to an IDP, really) to send certain groups to certain VLANs using filter-ids to match group policies, and the group policy puts the identity in that VLAN (wireless only).  The method isn't what phases me, so if it's completely different that's all good. It's the outcome - specific groups of users/devices into specific VLANs all using the same SSID - i.e., "CORP-SSID". Thanks!  ... View more

Doing this, is there any way to return a group policy ID or VLAN for a certain user/device/etc.? Appreciate the work here, great stuff! ... View more

Hey HEJ,    Yeah, I'd noticed that. Oddly, if you look at other API endpoints you can see both t0 and t1. Happy to help either way. Thanks.   Jonny.  ... View more

Hey HEJ,   The timespans must be requested in seconds, however the start date & end date must be requested in Epoch time - https://www.epochconverter.com/   Basically, for your exact call -  https://api.meraki.com/api/v1/networks/{yourNetworkId}/clients ^^ This would be the destination t0=1612172374 t1=1612258774 ^^ These are examples next to the required query string parameters for the start (t0) and end (t1) date in Epoch. The above example is 1st Feb 2021 until 2nd Feb 2021 ~09:30 both days. When specifying, follow standard query string format - ?foo=bar&foo1=bar1. The full API request would therefore be -    https://api.meraki.com/api/v1/networks/{yourNetworkId}/clients?t0=1612172374&t1=1612258774   Hope this helps 🙂   Jonny ... View more

Hey M-Nasan,   No worries. Let me know how you get on. I'm invested! Cheers.   Jonny. ... View more

Heya,   Is there any chance you can pass the data from the one browser session over to the server in some payload and then pass it back to the new browser session? Could be some query strings or in some database? I.e. POST from my client could send more data - make sense?   To open up a case, you can go to the dashboard, log in go to Help > Get Help in the top bar. From here select MR or API/Webhooks then select Still Need Help and give them a call.    Hope this all helps!   Jonny. ... View more

Good morning,   Okay, so I have an idea to test this. Are you able to copy the registration link - the URL (https://xxxx.tk/email/verify/126/25422f30b3d58abe2c645fa755f85f19775ff5eb?base_grant_url=https%3A%2F%2Fnxxx.network-auth.com%2Fsplash%2Fgrant&branch_id=7&browser=Chrome%20Webview&campaign_id=29&client_mac=xx%3Axx%3Axx%3Axx%3Axx%3Axx&device=phablet&device_id=11&expires=1611392149&manu=Samsung&network_id=7&os=Android&signature=f920e844454f241097c0956eddb041c5203ee5ef4f6a8e2e8a2a3885711e20b2) - and paste/go it in the browser the registration originally happened in? That way you should be able to test to see if it is a session thing. When looking at the session there is a lot less data for mobile. Not sure if that's a major worry - I couldn't find any clear documentation to see what is required/what isn't. Also, have you opened a Meraki case?   Thanks,   Jonny. ... View more

Hey Raf,    I believe it's the Video Access Log due to it having the ability to be accessed by people outside of the dashboard and Meraki not being able to timestamp them due to a series of unknowns - hence always UTC. A person could be accessing them from any time zone via the share link.   Jonny.  ... View more

Hey M-Nasan,    Is this happening on all models of mobile phones or just Android or just iOS? There is a troubleshooting guide here by Meraki - https://documentation.meraki.com/MR/MR_Splash_Page/Splash_Page_Traffic_Flow_and_Troubleshooting   With splash page auto redirects, they fail on Android v5.0+ by design (Android design). If the device is set to reject cookies you will also get results like what you are explaining.   Take a look and let us know.    Jonny.  ... View more

Hey Sam,   Yeah, everything should route via the route table. So, it should be your default gateway for clients & the MX. It's a little bit old now, but this has stood the test of time 😉 - https://www.youtube.com/watch?v=Prp9HrBjG14&ab_channel=SteveVTSftw The YouTuber goes through the setup which may help.    Not sure RE DMZ setup, maybe a new post may attract someone that does - or call Meraki and they may be able to provide some information to you. Hope this all helps.   Jonny. ... View more

Hey Sam,   Have you configured the Azure Route Table for those other subnets? The steps are outlined in this doc about 3/4 of the way down - https://documentation.meraki.com/MX/MX_Installation_Guides/vMX_Setup_Guide_for_Microsoft_Azure   Let me know how you get on. I did two of these recently with a similar outcome to what I think you're intending to have, and it worked well following the guide.    Jonny. ... View more

A - Balanced - Connectivity - Security.   Balanced is the default IDS/IPS CVSS scoring value, hitting 9 & 10. Connectivity matches 10 and security, being the most sensitive matches 8-10.    Jonny. ... View more