Cool contest! ... View more

I have also seen this happen with the AP is coming online and downloading new firmware.   It correctly displays when the firmware was complete. ... View more

I was finally able to work with support to roll back to 23.11 after talking to my sales rep. The firmware is locked but it looks like I am still having issues. They seem to be running smoother but I had two adjacent  APs drop clients and never have them reconnect. Not out of the woods yet.   ... View more

quick question, can I use this with a multi site ORG? and will it work if the sites have 2 internet feeds? ... View more

Re: Dynamic ARP Inspection on MS 120 Does not working I could not find any Dynamic ARP Inspection on MX series, It is just L3 switches capability I think. Smiley Happy ... View more

Hi Phillip Thanks for that, very help indeed. I guess i'm looking at 2 options then   1. Splash page with sponsor access 2. Sponsored access page   do you know can much of the above be automated with the api ?   i guess where we are trying to get to is user puts in details then email sent to servicenow, servicenow uses api to approve and emails go back to user and servicenow     ... View more

I do hope they will support MST at some in the future. In scenario’s where clients don’t want to pay for stacked switches in the core you have a single STP topo without the possibility to load balance VLANs across it. ... View more

@timeshimanshu  Lets assume I'm not a Network Engineer, and simple down the network to the MX84, a Cisco SG200 Layer 2 switch, and then my computer and a server. All I want is to allow 10.10.0.0 and 10.10.8.0 to freely communicate with each other.  MX is configured  Subnet-10.10.0.0/24, ID-1, MX IP-10.10.0.2 Then also Subnet-10.10.8.0/24, ID-8, MX IP-10.10.8.1 All ports are set to Trunk VLAN-1 with All VLANs allowed on the MX SG200 Switch Added a VLAN ID 8. All ports are set to Trunk and Untagged Do I set the port on the Switch that goes to the MX to both IDs? Then the port where the server is to both since one is a Virtual IP on 10.10.8.0? I'm also assuming the software vendor of the server can set a ID for them.  ... View more

this is exactly what the setup is like. I have asked the quesion and it turns out that on port 2 of the ISP switch/router is where you get the RFC1918 space address. On port 4 i have a public ip range and i can configure it manually and it is working thank you ... View more

definitely you will be. where are these gateways configured  on MX65 ? if not then you need to put the static route in your mx pointing towards other device in the same subnet that tells you the path to reach to other network.  ... View more

that depends if you want the MR to be in the same subnet as the MS. Secondly if you want to configure the multiple subnet then you need to configure MS port as trunk or if you want to advertise only single subnet then it would be access port. ... View more

@Aaron_Wilson Yes, we've done it a number of times. It's really never been a big deal.   For edge devices, my company only sells the advanced security license now, because content filtering/AMP/IPS are pretty good. Our primary customer is an SMB who isn't willing to spend for a lot of separate services to provide defense in depth. The advanced security stuff lets us improve their posture in a way that they'll accept easily. ... View more

Thanks for reporting back @GergelyK . ... View more

Just to give an update. I have done all of your advice.Our main ISP is now working on both Meraki and client. I just have concern with my failover.    Original set-up :  ISP->Meraki->Client   New setup       : ISP-> L3 Switch -> Meraki and Client.   On the original set-up,my failover is connected to WAN2 port of Meraki. Please note that my failover is working perfectly with Meraki. When main ISP(WAN1) is down, WAN2 will take over until WAN1 is up again.   On the new set-up, I configured a Layer 3 switch and connect both the client and Meraki in there.  So now, instead of my WAN2(failover) directly connected to Meraki port.    I connected WAN2 to our Layer 3 switch first. Then from L3 I connected it again to WAN2 port of Meraki. I tried to unplug WAN1 from Meraki, WAN2 take over as usual  but when I put back WAN1 and perform traceroute I notice that it is still the WAN2 on the route. It should be WAN1 again.  What should I configure in Meraki?    Please also note that the L3 switch does not have the capability to do failover that is why I am counting on Meraki and client to configure the failover.  ... View more

Hi    Normally, the partner you bought the license keys would/should be able to provide you with the following Post Order: EG: Meraki order number: 5s3xxxxxx Dashboard License Key Numbers:  Z2Ax-xxxx-xxxx Single Cisco Order Number:   1079xxxxx   If you log an e-mail support ticket to:   licensing@meraki.net   And provide that those details as provided above, then they will be able to help.     ... View more

Agreed, you'll normally need approval through the AM at Cisco/Meraki for this as well, so all needs to be done step by step back through the channel so the AM can approve the RMA for you.     ... View more

is the logs captured at the time when device is working normally? or when device have issue. ping logs looks fine.   if you captured the logs when device is having issue then raise a TAC case with Meraki i think there is some issue with the hardware. TAC will suggest you. ... View more

Hi Blake, Yes i am employed and also wait for my free gear but it not arived until now. I am already checking the kb. ... View more

@ArnieC wrote: UKFast would not allow personal equipment but they do support IPSec VPNs. Is this where the VMx would come into play? We have two virtual servers at UKFast, a SQL Server and a Windows Application server. Would VMx run on the Windows Application server? UKFast offers AWS and Azure solutions.    A virtual MX is deployed on an AWS EC2 instance or an Azure VM and then configured in the Meraki dashboard, just like any other MX. It functions like a VPN concentrator. Product Overview    ... View more

As @BrechtSchamp described. i also agreed this is the best way to find out the offline device also it can tells you the alerting device which have connection problem. ... View more

is there any other obvious reasons why we would jump from 35,000 to 85,000 users then. Definitely not on physical site ... View more

@BrechtSchamp    I always have a dedicated VLAN for my access points so I'm assuming that his possible solution is on by default in my situation. My ports are trunked, with the SSID vlans allowed, and the management vlan as well. the management vlan is native vlan on my trunk ports so access points reside on that vlan.  Makes no difference either way when I tested it. ... View more

Yes, that's what I meant too :). The AP will try the MX's private IP for the VPN tunnel. ... View more

You were right about the server gateway. All the servers had static ip info set long ago on to the original router and internet connection (we have two). The Meraki is on a second internet connection, but I totally forgot about changing the server default gateway to point to the new Meraki router. Once I did that, everything (except dns and I think I've got how to fix that) worked. Thanks a bunch to everybody for knocking the cobwebs loose so I could get this working finally. ... View more

Is this the first time the Z3C has been configured/used?   First time set up should be done using a wired connection, not the LTE modem. ... View more