Just back from a week's leave - what is going on with the dashboard ? It's a mess C'mon Meraki, get it reverted to the previous version, if it ain't broke, no need to fix it - in the words of The Smiths - 'This joke isn't funny anymore'
... View more
I found the same issue with a MS130, I had to configure the VLAN and DHCP option in the switch under LAN IP settings for the specific switch i.e. below
... View more
Response from support including workaround. That's teach me to opt in to new features.... Thank you for contacting Meraki support. We are currently aware of a issue that is causing false positive alerts due to a on-going issue that is being investigated with high priority. As a workaround please disable Opt-in to view and manage alerts in a new centralized Alert Page on the early access page until the issue is resolved to clear the alerts shown. Once we have confirmed that the issue is resolved we will provide you a update.
... View more
Yep, same here, hundreds of our AP's are reporting this error this morning, logged with support Access point has an ethernet negotiation failure
... View more
Do you mean MR26 are end of life ? MR36 are current models, no EoL or End of Sale announced. Whci one do you have ? If you have MR26 then MR36 would be an ideal replacement
... View more
I was wondering when trying to resolve issues previously I was having at some of my SDWAN sites and suspected packet fragmentation where, if any, MTU value was specified on the MR's. I tried reducing MTU sizes in NPS Radius connection policies, but had no joy. Ended up having to use the Meraki Proxy Radius to broker requests for those troublesome sites where there was fragmentation
... View more
I have the same issue at a few of our SD-WAN sites with Radius and EAP-TLS certs. My solution was to use the Meraki Cloud Radius Proxy for these sites - the request goes out directly across the internet (Not over SDWan where there is added VPN packet overhead) to the radius proxy and then onward into datacentre where the request is accepted and returned back to the cloud radius and onto the WAN site. Note: The meraki radius test feature (where there is no added user certs packet overhead) worked fine at these sites where it was only using username/pw authentication I found changing MTU size on NPS radius made no difference - you have little or no control on the MTU size across your ISP links etc Some pings showing packet fragmentation and comparing against working sites may help you check if MTU is your issue
... View more
Was someone in Meraki trying to fix the ongoing tagging bug (lower case tag names) and broke this ? I hope a full and honest explanation is forthcoming when this has been resolved. We are looking at removing wired ethernet in the offices and going fully wifi - This sort of outage has got me worrying about that proposed strategy
... View more
Yep just tried disabling SSiD availability - AP's cannot get updated - However, we have other networks in our organisation/dashboard that use SSiD availability schedules and they are broadcasting OK - is this network specific ?
... View more
I understand WPA3 is mandatory on WiFi6E (6ghz) - I can see this causing issues with legacy clients that don't support WPA3. Could it take a few years for all clients to be 100% compatible ? If so, doesn't this stifle the roll out of 6ghz now ? The idea of paying a premium for buying CWxxxx AP's now but not being able to take advantage of them right away by enabling 6ghz SSiD's kinda takes the shine off them. This must be the first time that there's no backward compatibility in this way to account for all clients on the same SSiD....
... View more
Same issue here - My dashboard is reporting that the tags should all be in lowercase where all of my tags are a combination of upper and lower case.
... View more
I would create a NPS connection policy just for the HQ access points and add a MTU entry (try different MTU packet sizes) within the connection policy just for the HQ. I've seen issues before with radius timeout when using EAP-TLS/Certs at some of our SD-WAN sites where those sites we fragmenting the oversized packet. I ended up having to use the Meraki cloud radius proxy as the middleman to get it to work at those sites
... View more
Thankyou Karstenl for the link to the doc. Has anyone have any info on licensing types (per client, network, organisation) needed and pricing please ?
... View more
Hello all I'm looking at the options for guest wifi web filtering and reporting for a small network of MR AP's within our existing Meraki organisation and I have a few questions around licensing and functionality that I would be very grateful if anyone has answers. I would like to know: 1. Can I integrate Cisco Umbrella into my existing MR Enterprise co-termed license model and apply it to just one network (with say 10 x MR AP's in it). How many Umbrella licenses would I need ? 2. Would I need to upgrade my existing MR Enterprise co-term to Advanced MR license (if needed) for the whole of the organisation or can I just upgrade one network with those AP's in that network. Can MR Enterprise and MR Advanced license co-exist in the same Organisation. I don't want to move our existing to a per-device licensing model, co-term works best for our organisation 3. Is the Umbrella license per MR AP or per MAC address client ? And if MAC client, do any new clients on the guest network that exceed the limit just not get filtering applied to them ? 4. How would I apply the Umbrella filtering policy to guest devices ? Can I just add device MAC addresses in a Meraki group policy and apply a Umbrella filtering policy to that ? Presumably I can then do device web activity reporting in Umbrella dashboard (I can cross reference MAC addresses with owners of those devices) 5. Has anyone got a rough idea of pricing for Umbrella per AP or client ? 6. Anything else I should know about Umbrella/Meraki integration ? !! Many thanks in advance !
... View more
You're gonna have to dig deep into the NPS logs and run some Wireshark captures. First off, anything changed, was it doing it before ? So many variables, do all devices do this ? anything changed recently? are NIC drivers up to date ? Do all NPS severs have the same issue ? Are all networks/AP's having the issue ? etc etc you get the idea...come back with some more detail about what you know and what you have tried and what you can rule in or out
... View more
@GreenMan It's not a problem, it's easy to just ignore it, I was just curious as to whether it was just me seeing this for the first time (and if so why) or if others with wireless only were seeing it too and if so if Meraki knew about it and had a reason for the change....
... View more
@GreenMan Thanks for the idea, but no, definitely never had any switches in the organisation and all networks have only ever been setup wireless only. The switch firmware has only appeared recently, so I suspect it's something to do with this 'independent firmware for cisco/ms switches' as per the banner
... View more
Just started seeing firmware for switches in addition to MR firmware listed in my organisation for the first time ever (organisation > firmware upgrades) - my organisation is MR wireless only, no Cisco or Meraki switching - any reason for this ? - Cheers
... View more
Just received the same email, the 2nd line ' AP's with manually assigned channels will revert to the default indoor RF profile ' is worrying, in that the default indoor profile will have 'auto channel assignment', so does that mean any ap's I have previously set to manual (to avoid neighbours I have no control over) will now be changed to auto, even if they are not using or have the capability to use UNII-3 channels ?
... View more
As @GreenMan has already mentioned, create a new network (clone if from the existing network) and move these 2 stores AP's into it. You then modify the employee SSID L7 Firewall settings in this new network to block Facebook. Job done
... View more