thanks Cmr. I was looking through all the webinars and could not find one. Hopefully i will get to one of those events to try it all out. ... View more

When i log into the dashboard the thing that comes to mind, is how much work i might have ahead of me for the day 🙂   Apart from that, would be a list of issues across various areas of the network based on severity. This would enable a quick look into whats going on and what needs to be tackled first ... View more

i would have liked to try out the meraki camera series , however i have not got around to it yet.   Is there a course or webinar to get a free one like with other meraki equipment. ... View more

i like both designs however i would and many would like to be able to customize to get what we want. Some people like overviews such as for management, others more technical data ... View more

    It sounds like to me the link is being overloaded and then packets get dropped.   have you tried prioritizing some of the traffic via traffic shaping / QoS.     ... View more

Thank you. I look forward to many more Meraki discussions, boosting my knowledge and sharing it with others.   Congratulations to all other winners. ... View more

if you don't want devices to send traffic via a known summary route, you put a more specific route in your route table for that device and point it to the next hop you want it to use.   You can also modify route metrics to influence routes as well ... View more

I don't have an issue doing geoblocking (each to their own), however you have to be aware, as mentioned about the cloud and the implications to your systems.   In saying that you could reach out to vendors and they will provide regional based servers that you can force your systems to update from, to get around the issue of trying to update from geoblocked regions. ... View more

are pings going out to other sites ?   can you ping say 8.8.8.8 ? did you do trace route from client to your external IP ? Try different packet sizes too.  100 and 1400 i use as testing.   They would be good start.   Then try the same from another location.   You will find often routing issues ISP - ISP in the path between their ISP and yours.   The issue if if a third party ISP, good luck trying to get them to fix the issue. But you can put pressure on your ISP to log tickets against their peering ISP. ... View more

Meraki at the moment as far as i know dont have a wireless bridge point to point solution that will enable you to route many vlan's across it.   For this reason we used ubiquity for wireless point to point building to building connectivity. ... View more

One thing to consider is to gather site to site statistics over a period of time.   Check for packet loss, possible routing changes occuring between ISP's, and latency. ... View more

have you tried clearing the security associations on both ends.   I have seen this before in cross vendor environments, where one end still thinks the VPN is active and the other end doesnt. ... View more

ok a diagram would help explain better what you are trying to achieve.   Your ISP should not be concerned or allocating IP space on your internal network.   An ISP would usually give you a /30 or /29 on your WAN side of things. Internal side of things, IP allocation for vlan's is usually completed by your network person (possibly you) based on hosts  / devices needed. Typically you would have multiple vlan's for security reasons, aka office traffic, management traffic etc. A /22 is a huge broadcast domain.   You need to think of amount of devices on vlan, allow for some growth. If its a small site then a /24 (of the /22) is all thats required.                 ... View more

done ... View more

You have not given us much to work on.   However you have not mentioned if your vlan's are using statically defined IP's ? DHCP ?   Is DHCP server giving the default gateway of the fortinet ? if they are static have you configured the fortinet as default gateway ?   On your switch just make sure your trunk ports are set to allow all vlan's, then test.   You can play with locking down specific vlan's on specific trunk ports later.   fortinet ------- trunk ----- switch port. ... View more

a way around this though, which is common practice from a security perspective is set all devices to UTC time.   This way all devices log with the same time markers, and if you are looking for issues between sites across the globe issues should be easy to find. ... View more

you have not mentioned if line of sight is possible, how far the "sites" are apart.   if there is line of site possible there are many non-meraki solutions (even if mounting something outside a window and mounted to external wall) from site to site. There are point to point wireless bridges, many many options.   Anyway if you are presented with a vlan as mentioned, i have not seen if meraki devices yet support dot q on q, i dont have end end meraki devices at home. ... View more

i would start by looking at AD, and the logs.   what is the password policy ? have their passwords expired due to not being changed ?   Can the AP's still talk to the AD server ? there are many things that could be at play. ... View more

i spoke to Meraki about this and their multigig capability and wifi accomodated standard as i have to do a 5yr lifecycle for site deployments for up and coming projects.   Currently multigig capability (theoretical is just under 5 gig even though multi gig 10 is out there).   So where am i going ? there are always technologies in the pipeline. Multigig throughput and anything beyond wifi 6 there are no current products planning to be released in the near future.     ... View more

if you posted your topology that would give us a better picture.   It could be switch issue, it could be a bandwidth issue somewhere like if you are doing backups. There are numerous things that could be at play.   So you could investigate and look into prioritizing some traffic over others.   eq setting backup traffic lower priority and bandwidth. ... View more

Thanks for the T-Shirt!!!!. So i guess i can say I ended 2020 with my head in the cloud! or is that upper torso! ... View more

Thanks Bruce for the welcome.   Are you in Melbourne ? Thats where i am from originally. ... View more

This is one of a few issues i found out with equipment.   Amongst things like hosts in vlan's being about to ping the gateways of other vlans ( which to me is a security issue in itself even though according to support is built to be like this - cannot think of a reason why, even when you have firewall rules saying not to allow it ), you can also get to port 80 of all these vlans which is also a non secure protocol that is automatically open.   At least they could do HTTPS ???     ... View more

no problems. sometimes it just needs another perspective when looking at how to tackle the problem ... View more

Connect the MG21E to the PoE switch via cat 5e or above patch lead. Then make sure you enable the POE functionality on that switch port.   Then patch your PoE switch to your MX device. You don't enable Poe on the port going to the MX.     ... View more