Hi, The Group Policy in Meraki can be applied at various Levels ie. MAC, IP, VLAN, AD Groups. Please check the following Url for the "order of priority" of the policies if applied at Multiple Levels.   https://documentation.meraki.com/zGeneral_Administration/Tools_and_Troubleshooting/Troubleshooting_Group_Policies#What_is_the_order_of_priority_for_Group_Policies.3F   Also make sure to select "Full List" under Security & SD WAN -> Content Filtering -> URL category list size.   ... View more

Hi, I understand MX do not offer DNS Services Adding MX Local IP in  DHCP NS List shall not be of any help. Hope your AD DNS server is working good to resolve domains.    You may follow @PhilipDAth instructions on this.   Also consider  verifying L3  L7 Content Filtering Traffic Shaping rules and Firmware version. ... View more

Hi, I have not faced  "Whitelisting Policy" not working with Meraki Wireless. I did faced Group Policy issues in Meraki Wireless + Appliance network which was shorted out later.   I never got an opportunity to Manage 1000+ WiFi user base though. If not ISE / MS you may consider FreeRadius / MikroTik.   You may start with http://www.freeradius.net/. Install it on a Windows Machine and check if a Radius solves the issue. However Lets wait for some more suggestion from Community Members.     ... View more

Hi, For a basic level of "users on boarding process" Meraki Radius seems to be fine. Any how you need to manually type in the MAC Address in either of the solutions.   In-case of Meraki you can specify the desired policy on the device while adding them on to the Dashboard. Screenshot attached for reference.     For a better functionality you may consider Cisco ISE. ... View more

Hi, I understand authentication in MXes works in a different way as they are Gateway devices. You may apply this on VLANs not on SSIDs.   Screenshot attached for reference.   Note : I have never tried configuring Facebook Login with MXes. ... View more

Hi, I have not seen this error. Seems there is an issue while querying LDAP. Could you try changing the username? Also try connecting with UPN Format ie. UserNam @ Example.Microsoft .com. ... View more

Hi Marc Thought for some time but couldn't get any ideas. I am not aware of any option to deactivate network. I believe you may have to leave it as it is. May be you can rename the network with a meaningful text like "Under Maintenance" or something better.  ... View more

Hi Rajinder This is not a good sign.  Few quick questions 1 Is the device live on the dashboard? 2 What firmware version do we have? 3 On which interfere have you connected the point to point link?    ... View more

Hi Stu, To upgrade the Firmware one should have "Organization Wide" admin Rights.   You will see "Firmware Upgrades" option under "Organization".   Screenshot attached for reference.     ... View more

Hi Are you sure? They should be in the same range but need to be different. Is your VPN working meaning are you able access resources from your office network? ... View more

Hi,   This is what I understand.   You are trying to connect to MX84 as client VPN from  remote location. The Client VPN connection is successful. However when you do a "ipconfig" on your pc. The IP Address and Gateway IP Address is same?   Is my understanding correct? ... View more

Hi,   I am not sure as have not tested but considering the MX routing behaviour I believe NAT/PAT shall be over-ridden by the VPN Default route.   https://documentation.meraki.com/MX/Networks_and_Routing/MX_Routing_Behavior Route Priority Each type of route configured on the MX has a specific priority in comparison with other types of routes. The priority is as follows: Directly Connected Client VPN Static Routes AutoVPN Routes Non-Meraki VPN Peers NAT* However may be we shall wait for inputs from other community members. ... View more

Hi Paul,   I understand this shall not be a challenge.   Kindly check the following Url. https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-site_VPN_Settings#Non-Meraki_VPN_peers   Following section is an excerpt from the above Url Non-Meraki VPN peers You can create Site-to-site VPN tunnels between the MX appliance and a Non-Meraki VPN endpoint device under the   Non-Meraki VPN peers   section on the Security & SD-WAN > Configure > Site-to-site VPN   page. Simply click "Add a peer" and enter the following information: A name for the remote device or VPN tunnel. The public IP address of the remote device. The subnets behind the third-party device that you wish to connect to over the VPN. 0.0.0.0/0 can also be specified to define a default route to this peer. The IPsec policy to use. The preshared secret key (PSK). Availability settings to determine which appliances in your Dashboard Organization will connect to the peer. Note that if an MX is configured with a default route (0.0.0.0/0) to a Non-Meraki VPN peer, traffic will not fail over to the WAN, even if the connection goes down. ... View more

Hi,   Do check the following Url at the bottom of the page it is nicely listed down about all the settings that shall be cloned. https://documentation.meraki.com/MS/Other_Topics/Switch_Cloning   You may also watch the following video in case you wish to understand more on replacing a switch out of a stack. https://www.youtube.com/watch?v=BrXCNcnJf4c ... View more

Hi,   The Meraki Block Page will appear only for "HTTP". Try browsing a HTTP Url.   For more information check this Url   https://documentation.meraki.com/MX/Content_Filtering_and_Threat_Protection/Content_Filtering/Content_Filtering_Troubleshooting#Why_is_the_Meraki_block_page_not_displayed.3F   Excerpt from the above Url. Why is the Meraki block page not displayed? If the website you are trying to reach is using HTTPS/SSL (rather than HTTP), the browser will display an error page rather than the Meraki block page. Because HTTPS/SSL traffic is encrypted, the MX cannot decrypt and redirect HTTPS traffic to the block page. Instead, the request will simply time out. ... View more

Hi, No specific reason. Just to test the configuration.   "All Internet traffic will use the primary uplink unless overridden by an uplink preference or if the primary uplink fails." There is a slight ambiguity in the above statement. (Seems like this works only when load balancing is disabled)   However I believe Flow Preference will work even when "Load Balancing" is enabled. ... View more