Meraki

alemabrahao · ‎Sep 17 2025

Take a look at this document. https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/Wireless_Client_Isolation It's under Wireless > Configure > Firewall & traffic shaping

alemabrahao · ‎Sep 17 2025

The health checks for tunnel monitoring do work in Routed mode, not just in Passthrough mode. The health check probe is sourced from the MX's WAN interface, even in Routed mode.

alemabrahao · ‎Sep 17 2025

Hi, take a look at the documentation. https://documentation.meraki.com/MX/Site-to-site_VPN/Primary_and_Secondary_IPsec_VPN_Tunnels

alemabrahao · ‎Sep 16 2025

If both are configured for HA, it doesn't make sense for them to be on different versions. If you don't have access to their management, it would be a good idea to talk to someone who does to evaluate it. I also suggest opening a support case with Meraki.

alemabrahao · ‎Sep 16 2025

Take a look at this. https://help.okta.com/en-us/content/topics/integrations/cisco-meraki-radius-intg.htm

alemabrahao · ‎Sep 15 2025

What is your question ❓ https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/Wireless_Client_Isolation

alemabrahao · ‎Sep 15 2025

unfortunately not.

alemabrahao · ‎Sep 13 2025

It's a video tutorial explaining the installation. https://youtu.be/bXJkfxd-2QA?si=kBQPvLg_4gE7-qgm

alemabrahao · ‎Sep 13 2025

Take a look at this, this part explain the configuration for the Meraki. https://www.packetfence.org/doc/PacketFence_Network_Devices_Configuration_Guide.html#_meraki

alemabrahao · ‎Sep 13 2025

It's free 😄

alemabrahao · ‎Sep 13 2025

@TyShawn wrote: Has anyone here deployed PacketFence with Meraki access points? I’m considering the setup and wanted to get some first-hand experiences. Specifically: How was the initial setup process? Any "gotchas" to watch out for? How well does the captive portal work in practice? Has anyone implemented IPSK with Meraki + PacketFence, and how smooth was that configuration? If you know of any good video tutorials or walkthroughs, those would be really helpful too. Any lessons learned, best practices, or pitfalls you’d share would be much appreciated. Thanks Packetfence is a radius server like any other and should work with Meraki without any issues. It also has very comprehensive documentation. Take a look at the documentation. https://www.packetfence.org/doc/PacketFence_Network_Devices_Configuration_Guide.html

alemabrahao · ‎Sep 13 2025

I believe the best option is to check if you're experiencing any issues with your internet connection. Check if your devices have IP addresses. https://www.cisco.com/c/en/us/support/docs/switches/meraki-cloud-managed-switches/217880-troubleshoot-meraki-device-unreachable.html

alemabrahao · ‎Sep 12 2025

alemabrahao · ‎Sep 12 2025

This is expected behavior, as far as I remember, so in this case, what you can do is go to Organization > Configuration Templates. Find the template your combined network is using. Create a new network (e.g., a wireless-only network) and link it to the same template. Add the new APs to this linked network. If necessary, combine this new network with the existing combined network.

alemabrahao · ‎Sep 12 2025

I would also like to know who is the gateway of your network (Switch Core) and if the IP Helper-address is configured on the Core interface?

alemabrahao · ‎Sep 12 2025

Can you share a screenshot of how many free addresses you still have on the server? Please.

alemabrahao · ‎Sep 12 2025

Only networks that are also bound to the same template can be added to a bound combined network. The newly claimed APs are not yet part of a bound network, so Meraki blocks the addition. Can you show exactly what you are trying to do?

alemabrahao · ‎Sep 12 2025

It seems to be ok. Have you checked if there are still available IP addresses on your DHCP server? If nothing has changed on the network side, IP address exhaustion may be the reason.

alemabrahao · ‎Sep 12 2025

How is the configuration of the switch port where the AP is connected? Please provide us with more details, such as your topology. Thanks

alemabrahao · ‎Sep 12 2025

Nada melhor que o bom e velho TAC hehehe.

alemabrahao · ‎Sep 12 2025

You don't need an advanced license to use ACLs, but you do need an adaptive policy license. It may take 1-2 minutes for the changes to the ACL to propagate from the Meraki dashboard to the switches in your network. https://documentation.meraki.com/MS/Layer_3_Switching/Configuring_ACLs

alemabrahao · ‎Sep 12 2025

Default Behavior: Yes, Client VPN is full tunnel by default, all traffic (including internet-bound) is routed through the VPN. Dashboard Control: Correct, Meraki Dashboard does not control split/full tunnel behavior for Client VPN. Split Tunnel Configuration To achieve split tunneling, you must manually uncheck “Use default gateway on remote network” in the Windows VPN adapter settings. This causes internet traffic to go directly out the local interface, while traffic destined for internal networks (defined by the VPN subnet) still goes through the VPN. Site-to-Site VPN Controlled by Dashboard: Yes, the “Use VPN” and “Default Route” settings in the Hub configuration control split vs. full tunnel. Checkbox Behavior: Checked = Full Tunnel: All traffic from the spoke is routed to the hub. Unchecked = Split Tunnel: Only traffic destined for specific subnets (advertised by the hub) is routed through the VPN.

alemabrahao · ‎Sep 12 2025

You can delete it directly and the device remains in the inventory, requiring you to manually add it to a new network. Deleting a Network Networks can be deleted when they are no longer needed. The devices from the network will remain in the organization's inventory and can later be added to new networks. Follow the steps below to delete a network. Note: If billing has been enabled on a network, the network cannot be deleted. https://documentation.meraki.com/General_Administration/Organizations_and_Networks/Creating_and_Deleting_Dashboard_Networks

alemabrahao · ‎Sep 11 2025

If you're running MR31.1.7.1 or newer, consider downgrading to MR30.6, which is theoretically unaffected by the transmit power bug. If possible, try temporarily configuring your APs to use UNII-3 channels, which are unaffected by the power limitations and allow up to 23 dBm.

alemabrahao · ‎Sep 11 2025

I have a few suggestions for you. Check the Meraki event logs for timestamps and compare them with the RADIUS logs. Run a packet capture on the Meraki access point to verify that the RADIUS request was sent and a response was received. Validate the certificate chain on the client and RADIUS server. Test with a different device or certificate to isolate the issue.

About alemabrahao

alemabrahao

Alessandro Abrahao

Community Record

Badges