Disable "web cache" in SD WAN & Traffic Shaping and reboot MX will solve the problem as a work around. ... View more

3 case in these days after MX upgrade: a lot of websites won't load despite not being blacklisted! Rollback done to v17.10.2 and problem solved   Please Meraki don't force to any stable RC release!!! ... View more

Hi, same here! Rollback done to 17.10.2. Meraki please do not force upgrade to any "Stable RC" versions! ... View more

same here! ... View more

works, thank you ... View more

solved on webabi by adding query params tags[] still having problems on Postman, it seems to ignore the filter ... View more

Same here, still having problems! ... View more

Something is changed in dashboard? NBAR events can no longer be selected     ... View more

Sure? This customer does not have an AnyConnect license and does not use it. Summary reports says that device utilization is under 20% in the last week and CPU data are insufficient.   Still having uplink down/up for 20 seconds: I'm just thinking the problem is related to STP , I could remove the closed loop cable on switch for some days. ... View more

Hi, we are using this Powershell script. Try to arrange as your needs. The script could be automated via Windows Server GPO as startup computer script. Bye. ... View more

Access - Untagged VLAN1 management on both sides ... View more

Nice idea, let me check.  ... View more

It could be.. but on 2 different port? Port3 and port4? ... View more

yes ... View more

We are using Fully Redundant (Multiple Switches) design: https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair The crossover VRRP link is made by switches, not by MXs   This is a piece of log:   ... View more

Still having problems with Traffic analysis DISABLED and L7 "gaming" activated! DNS requests are categorized as "XBOX LIVE" 🙄 It's urgent! NBAR still blocking wrong services..  ... View more

It works, many thanks ... View more

Same things here. Blocked DNS requests as "XBOX Live" 😞   Disabled NBAR in Traffic analysis but i would like to maintain it to "detailed" and "all gaming" L7 rules! Please fix!     ... View more

Same here. From 5.7.8 to 5.7.9. Keep app up to date is checked.   ?? ... View more

@PhilipDAth wrote: >could be a NPS server inside my network and not public exposed or must be public?   If you are using that method it has to run over the Internet.  You can NAT through udp/1812 to your RADIUS server. Already did, let me do other tests tomorrow. In your opinion i must insert PUBLIC or private IP address on Radius Server host in Access Control page ?   Thank you all guys. ... View more

@GreenMan wrote: If splash page is your particular ask, then this will apply:   https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Splash_Page#MX_Splash_Page_Options Yes, i know. Splash page depends from access control page: if i set Network access > Sign on with "my radius server" i can setup a Radius IP. But the main questions is:   could be a NPS server inside my network and not public exposed or must be public? If i do a port forward of 1812/UDP from Meraki Cloud IPs to the NPS private IP, it works? That page says that: IP addresses The Meraki cloud must be able to communicate with your RADIUS servers via the Internet. Please make sure that: Your RADIUS servers have public IP addresses (i.e., they are reachable on the Internet). Your firewall, if any, allows incoming traffic to your RADIUS servers. You whitelist IP addresses as clients on your RADIUS server as per the firewall information page.   @GreenMan wrote:   I see you found that already, in Dashboard -  and that the multi-client recommendation puts it out for you  (😕).   It's worth knowing that the authorisation, on that basis - if you did adopt it - is an on/off switch.   Assuming the VLANs on your site are all routed by your MX, by default authenticated clients would be able to access all those.   You could limit any access between them (and to the Internet, of course) using the MX Firewall features.   Note that, if you're also using VPN, you would need to control any access to remote subnets over VPN tunnels separately, using VPN firewall rules under Security & SD-WAN > Configure > Site-to-site VPN Right  ... View more

The 802.1X configurations on all Security Appliances are designed for a single-host authentication. Connecting multiple devices on the same port is not recommended.   No, this is not what i am looking for. ... View more

Excuse me, i found the setup page on a MX67, but this MX100 hasn't got Port-based auth   But is this valid only for internet access or for whole LAN access?  For example, can a host on this VLAN comunicate with a file server o same VLAN without do the auth?   I searching something only for internet, like captive portal.. ... View more