And that is really what I hope for is something simple.  People are buying the MX because it's a simple to deploy product.  Many of the IT people at these schools that I am dealing with a more Microsoft type IT people and they can find their way around the MX mostly.  They don't want to call for every change they need to make.   Also if it's a built in solution I would hope that it's kept updated as TikTok makes changes to get around firewalls then Cisco Meraki would also make changes to keep the blocking working. ... View more

I forgot to mention that the MX250 at the head end already has 2 x internet connections so is there a work around to be able to still do this solution?   Also the 2nd WAN has to use DHCP because they ISP won't supply a static IP.   Is there a hidden feature to have a 2nd IP on a WAN interface or a way to make another port also function as a WAN interface?   Or a way to run an Auto-VPN on the inside ports? ... View more

Customers using Starlink can run into issues using Meraki SDWAN  if they use 192.168.1.0/24 The Starlink router uses 192.168.1.0/24 for the local LAN subnet. If your office uses 192.168.1.0/24  as well then this will cause issues for SDWAN and VPN Traffic    Prior to version 15.44  you could have the WAN subnet the same as a subnet on the  SDWAN   the route on the SDWAN took preference. after 15.44 the traffic would go out of the WAN port and get lost. This issue was fixed again in 18.0.2 but requires Meraki support to do a back-end fix. The best solution would be to change the WAN subnet to a different range but this has been impossible. I recently had a Starlink at my office and with the help of support, there is a solution now. Starlink allows you to bypass the modem but you must have the ethernet adaptor   ====================================================== To bypass the router, go to the App home page > Settings > Advanced Starlink App version must be at least 2.0.19 to work The toggle button on to bypass the Starlink router This allows you to completely disable the Starlink Wifi Router. You would need to utilize a Starlink ethernet adapter in order to plug in your own equipment. While Bypass mode is enabled, router commands will not work. If the toggle switch does not appear in the Settings tab, can factory reset the router and/or delete and re-download the app. App Message in red text when Bypass is enabled: "Bypass Mode will completely disable the built-in Starlink Wifi router. this is an advanced feature that requires a Starlink Ethernet adapter and your own network equipment. A manual Factory reset will be required to reverse this." ==========================================================   As an interesting aside..  MY voice MOS scores change changed from 4.4  to 4.2  when using Starkink  and Packet loss was about 1%  Starlink MOS score   ... View more

Just an update of what I did to get 5G on my ATT account.  I saw they now have the Netgear Nighthawk M6 so I purchased the pro version of that and it works GREAT.   https://about.att.com/story/2022/netgear-nighthawk-hotspots-5g.html   Its also quite small and can run battery or just off a USB-C power plug.  Has a single 2.5 G Ethernet port also. ... View more

Hi @GiacomoS It was a temporary issue resolved some time ago.  Thanks! ... View more

Multiple Solutions would be something, as well.   Or the posibility to chose two as a solution, as there can be more than one way a good one. ... View more

From my understanding (which may be out of dat now), Meraki use MaxMind for their Geo IP database. You can use tools on their site (the demo portal) to test the location of up to 25 addresses a day.   I was always of the understanding that the Geo-blocking only works in the upstream (outbound) direction. So if you have traffic coming from a blocked country it will potentially hit the servers (firewall rules permitting), but any return traffic will be dropped. This prevents and TCP connections from establishing, but does mean you potentially see traffic from ‘blocked’ countries hitting your servers - e.g. TCP SYNs, UDP and ICMP traffic. You’d need to check this to be sure though. ... View more

I’m thinking out loud here, but from memory the MR ports are always operating as a trunk (they don’t have an option to run as an access port), whereas when you put a MX into single VLAN mode all the ports are configured as access ports (since there is only one VLAN).   So I believe the error you may be seeing is because the MR is receiving a packet with no 802.1q header when it is expecting one, which leads back to what @ww said, which is make sure the VLAN field is empty on the MR’s management address configuration. With no VLAN configured on the MR management address it should assume the native VLAN (and so not expect the 802.1q tag).   If that still doesn’t work you might have to resort to some packet captures to see what’s going on. ... View more

We use a Lifesize system just fine.  Does your Cisco system need any routes to get out the MX?  You may want to double check the config from whatever device you replaced.  ... View more

each MX needs to be able to see the other MX on each VLAN (the MX runs VRRP between each internal layer 3 interface).  You can use access interfaces to achieve this if you like, but trunk interfaces tend to be more efficient on ports when there are more than just a handful of VLANs.  There is also nothing to stop you using both trunk and access interfaces at the same time, as needs may require. ... View more

Fortunately they fit in standard UK and European single gang wall boxes as well ... View more