I added 8.8.8.8 to the secondary DNS to WAN2 and it became Ready. Seems strange that WAN1 internet had no issues with using internel DNS servers for both primary/secondary and WAN2 internet, just adding 8.8.8.8 as the secondary DNS worked.   Thanks for everyones help.   ... View more

Thank you for that info.  Very helpful ... View more

Yes. I think it has to be 0.0.0.0/0. And dont forget That next hop need to route back aĺl vpn and local vlan subnets back to your mx ... View more

Unless the previous owner releases this from their dashboard then I’m afraid you own a doorstop.   Meraki can’t and won’t be able to assist  ... View more

Just wanted to post a follow up..Its acting up again and pointing to the cable..Even through it tested clean I am havign them replace the ends. It may work great for a week then drop which makes troubleshooting hard ... View more

I've been running multi-VLAN support over mesh at a couple of sites for about 6 months now and it hasn't seemed to cause any issues.  We're not moving a ton of traffic over those links, the primary use is to keep a few multicast audio streams isolated in their own VLAN, but it also allowed us to get a couple of IP phones back into the voice VLAN.   You will need to open a ticket with support asking them to enable it and let them know which repeaters it needs to be enabled on and what VLANs to allow on the mesh.   Russ ... View more

You can use iPSK on the SSID without RADIUS for up to 50 clients. https://documentation.meraki.com/MR/Encryption_and_Authentication/IPSK_Authentication_without_RADIUS  ... View more

“If the application on the server is secure” is the first misconception. There is no secure application. A DMZ is not that complicated, it’s best practice and you really should implement the server in a DMZ. ... View more

I am having this issue as well, the Air Marshal is not the problem, it is already set to allow,  I Cannot get these lights to connect to an MR56, on an MR52 it is fine, same SSID..... frustrating since the MR52 is far away and does not always connect well.   Any suggestions or recommendations would be appreciated! ... View more

It's a pitty that the hotline service wasn't informed and didn´t know anything   ... View more

Hi   Everithing was good . Thanks ... View more

My issue is that I do have guests.  What I am trying to prevent, is students bringing in a personal device and connecting to the wifi.  We supply each student with a device that is managed, and on a SSID that is distributed by the management software.  I want to provide a SSID for adults.  Staff have personal devices, and there are guests that come and go.   A LDAP solution would make managing guests a nightmare.   A Meraki account solution would be very similar, and possible impersonation?   I am hoping to manage the solution through the portal.  As someone connects, I can see their presence, and establish an allow.     The students are such a moving target, I am trying to prevent alot of repeated attention.  I need to not rely on an email request from a random address.  We have a tech person in each building, and I make the requests be in person through her.  Then I can allow.  Else we have issues.  I did just have a shared password on a staff SSID, but the teachers give it to the students when they whine.   I'm thinking RADIUS is the best blocking, and easiest whitelisting?  While preventing any accounts needed..??   Open to other strategies, just need to ensure their is an ease of use, and no opportunity for student access. ... View more

Hi Thanks, I missed that, or didn't understood that way.   OK when Meraki Support activates this "option" I'll get the oportunity to NAT my LAN to un specific IP - This IP doesen't have to existe elsewhere ? - This option will NAT always my LAN to that IP before going to Tunnel (This will make problems when other LAN would join this network on normal ip range un-natted)   How can I do to: - NAT only and only if destination is beyond other VPN point. - Don't NAT for others destinations in VPN, all other Lan destination?   Something like route maps ? How to manage this ?   Little complicated ...   Thanks ... View more

Try changing your "*.google.com" in the allow list to just "google.com".  I had an issue where someone here tried to block netflix.com by adding *.netflix.com to the blocked URL list and it did not work, I had to use "netflix.com" to get it to work.  I assume the allow list works the same way.   Russ   ... View more

As Russ said it's the MDNS name. If a custom name has not been given to a client in dashboard MDNS is the next value to be used if detected. The order dashboard uses to show the client name is here.   If you'd rather have DHCP above MDNS (like I would) please click the give feedback button in the lower right corner so Meraki can hear your input. ... View more

Ok to be clear,  What exactly do I plug in where and bring up on a browser to setup the Public IP?  I connected a network cable on my network last night and came in and it had handed out a bunch of IP address so I had to unplug it in a hurry.  I'm a dork. ... View more

There's one exception to this rule, that I'm aware of and it relates just to the original virtual MX 'devices'  (VMX100 in Azure, AWS etc.)   The licences for these are, in effect, also the devices - and you can no longer buy them (they are End of Sale, replaced by more capable and flexible VMX-S/M/L).   When your co-termination date arrives, therefore, you cannot include them in a Dashboard renewal.   If you do just renew - even if you include (say) a VMX-M (functionally equivalent, scale-wise, to VMX100) - your Dashboard will show:    VMX100   License limit 0   Current device count 1 (or more) and you will be non-compliant, licensing-wise - and thus, into your 30-day grace period.   If you have VMX100s, you need to plan to deploy new VMXs (small, medium or large, cloud-platform dependent) and a migration of remote peers from one to the other, in advance of your co-term renewal. ... View more

Hi All,   thank for those comments but still haven't get the solution ... View more

@JDavie in my experience it will either work first time, or it will not, we have some HP switches that just don't work with any DAC, but some Force10 ones seem happy with anything... ... View more

It can be done but the tester has to be made for it.  I've used an EXFO OTRD that had the ability, but there was a seperate port for testing a live fiber and a dark fiber.  There was a warning that using the port for dark fiber on a live one could cause damage. ... View more

I figured it out. The problem was self-inflicted, like so many are. I have three MR30 APs set-up as wireless bridges for another network on the table next to my desk. My phone/laptop were both trying to associate to the bridges instead of the MR74 on the ceiling, which is connected to the production network.    I just completely forgot that the MR30s were sitting there powered-on but without a usable connection to a DHCP server. When I got up from my desk to go get some coffee, I saw them sitting there and what was happening smacked me in the face.   Working in IT provides a person with plenty of opportunities to make an arse out of yourself.  🤐   False alarm.   Sorry.   Twitch ... View more

@Mohit_Chauhan  There is good information here:     Frequently Asked Questions for Cisco Meraki Access Point Antennas - Cisco Meraki   That document addresses the question of using multiple antennas to increase range:   Can I Aim Directional Antennas in Different Directions on the Same AP to Increase Coverage? No, this is not recommended. On a 4x4:4 access point, such as MR84/86, all antennas should be the same type and have the same orientation. If, for example, there is an MR86 with two ANT-25 patch antennas connected, do not attempt to aim each antenna in different directions in order to increase the coverage area. This will send two spatial streams in one direction and two spatial streams in another direction and will have unintended consequences. ... View more

I don't have a lot of experience with multicast, but my understanding is that you only need multicast routing if you are routing multicast traffic between two or more networks.  If everything is on a single LAN you just need IGMP Snooping and and IGMP Querier.   I do have an application on one of our networks that relies on multicast, all I did for that network was to create an interface on the switch closest to the multicast source and under Multicast Routing I selected "Enable IGMP Snooping Querier", then under Switch Settings I have "IGMP Snooping" Enabled and "Flood unknown multicast traffic" disabled.   Here is some information from the Meraki documentation about multicast support:  Multicast support - Cisco Meraki   And this community post was very helpful:  https://community.meraki.com/t5/Switching/Multicast-Basic-s/m-p/25867#M2125   Russ   ... View more

I noticed you said "We also enabled some Firewall L3 rules on it means user only get connect those specific IP's."  Do your L3 firewall rules allow access to the DHCP server?  The first time I tried using L3 rules to lock down a machine I forgot to explicitly allow DHCP and DNS.   Russ   ... View more