@The_Livingstone, if you go to Security appliance > Monitor > Appliance Status you can click on the Uplink tab. Under the WAN section, it shows the IP on the WAN and it'll have either (DHCP) or (Static) next to it. ... View more

I haven't had this issue before and I'm running several 225's in my environment. What kind of phones are you using? I have Digium's in my environment. ... View more

I probably should have been more specific. So when I'm trying to reach a remote device while on my network, I can access the MX device of a remote branch by using the Private IP address of the MX device. For instance, my local branch is 192.168.1.0/24. The local IP for the MX device is 192.168.1.1. My remote branch is 192.168.2.0/24, with 192.168.2.1 being the local IP for that MX. If I want to view the config page of either device, I simply type in the private IP. ... View more

You can still access those remote configuration pages by going to the IP address of the MX device. I access my remote branches all the time. ... View more

If you go to the IP address of the MX device (or type in setup.meraki.com), it will pull up the configuration page for the MX64. Click on the Configure tab and enter the admin credentials for that network. You should be able to now change WAN 1 and 2 to static. ... View more

Have you tried selecting which vLANs you want to participate in the Site-to-Site VPN? If you go under Security Appliance > Configure > Site-to-site VPN, under the VPN settings is a section called local networks. If you select NO in section "Use VPN", this site will still be accessible to its local network but not to any remote sites. Additionally, if you scroll to the very bottom of that page, there is a section for Site-to-site outbound firewall. Site-to-site firewall rules control what traffic is allowed to pass through the VPN tunnel. These rules will apply to outbound VPN traffic. They will not apply to inbound traffic or to traffic that is not passing through the VPN.  ... View more

@DunJer622, First off, welcome to the forums and Meraki in General!   One thing to keep in mind with the Security Appliances is the number of VPN tunnels that are connected to the device. The MX64/65 won't be able to handle as many tunnels as say an MX84 or above. Is there a central location that you will have all resources coming back to? Do you have a backup site? Do all your branches need to have direct connections to each other? Think about what you truly need in terms of your topology before you breakdown and buy a bigger MX device, but make sure you get a bit more than what you need. By this I mean that lets say you only are going to have 85 connections. I would spring for the MX100 (250 connections) vs the MX84 (100 connections). The reason for this... future growth. But that's just my $0.02     ... View more

We certainly do appreciate the adjustments as I'm sure they are making our lives easier without us realizing it 🙂   So I noticed that in this thread there is no title-when-reply-to-post but others they are smaller font and bold. Didn't it used to be a Greenish color? (I'm committed to finding the little adjustments that have been made). Also, do Message tags look different too? It used to be just the word, but now it's a little bubble, right? ... View more

Under Security Appliance > Configure > Traffic shaping, what is your Uplink configuration set to? If you have it set to the full 2 Gbps, your device could be trying to pull bandwidth that it is incapable of doing. You should set this to the actual speeds you are paying for (I learned this from support a few months back).   Additionally, there is a section for Global bandwidth limits which sets a per-client limit. What is that set to? This could be affecting your speed if it is set too low.   And of course, like everyone is saying, check the duplex setting on the uplink connection. ... View more

@BlakeRichardson, to be fair, @BradB did ask what kind of advanced training we as CMNO holders were looking for and only one person responded. He even explained how the different certifications worked. While I agree we should be able to take the Masters course, that is not the case right now; however, what we can do is leverage this forum and try to get more advanced training.   @BradB - to answer your question 5 months later... the type of advanced training I'm looking would be similar to what is covered in the Meraki Masters training. Seeing as how CMNO and CMNA are essentially the same thing just aimed at different targets, you can make the customer version of Meraki Masters called Meraki Jedi. Just gotta get clear that with George Lucas! ... View more

Is it that there's no more title when you reply to a post? Didn't that used to be a thing?   Also, I noticed in the list of topics that if the post has a picture, there's an icon now. Is that new?  ... View more

@chad,, Here is the link for the URLs and IP address ranges for O365 which includes Skype. Office 365 URLs and IP address ranges If you put in blocks for the IP ranges and FQDN, you should be able to block it completely     ... View more

Hi @chad, If you go Security Appliance > Configure > Firewall, under Layer 7 Firewall rules you can add a policy to deny VoIP & video conferencing. From there you can select Skype on the next drop down box. ... View more

I might be completely off base here, but on the home page it used to just say select a product to get started. Now I noticed that there is an other topics section under that. Before I would scroll down to click on Off the Stack. ... View more

@PhilipDAth, I've had been testing with Meraki support for over a year before we found a version that kinda worked for us, but ultimately has failed after a new version of our software came out. We had even whitelisted the server and added additional rules and still nothing happened. When AMP was enabled, the file would begin to download, get to 74%, and then just stop. Nothing would be reported in Security Center and the only way we would know about the failure/block is by users calling in.    As far as my issue is concerned, I believe it has more to do with the application we are downloading rather than AMP, but I feel that if I have a WHITELIST applied I should be able to bypass whatever algorithm is prompting the block. ... View more

We've done a lot of testing with AMP at various levels of Beta and we run into this issue constantly with one of our important programs during upgrades. Disable for the upgrade.. re-enable afterwards is still the best solution we have even in the 14.xx series  ... View more

@FernandoC, Sorry for the long delay in getting this resolved. In order to get this fixed, I had to move the network with my summarized route into a new organization. After this was done, I had no trouble utilizing templates for network creation.   You can easily move your network (and licensing for the device) to a new organization (known as an Org Split) by calling Meraki support. I had to do this yesterday morning and from start to finish it took roughly 15 minutes. When doing an Org Split, the configuration of your device does not change, so you can rest assured that your configuration will be there. Also, I did not experience any down time when doing the org split but it is possible you may experience a 1-2 minute drop.   If you have any further questions on this, I'll be happy to respond. ... View more

This is awesome! I'll give it a whirl later on in the day. ... View more

Every single network device I've used always comes with a default user name and password. During initial setup, we change this password to something more secure. Setting up the Meraki device username/password is no different than on a HP. If YOU don't change it, there's a default that anyone could use if they know where to look. ... View more

Congrats guys!! ... View more

@Uberseehandel, keep in mind, there are some things that do not report. For instance: When you change the ports on the security appliances, you do not get the before and after. ... View more

@MerakiDave, thanks for your response!   Now, my question is as follows: I understand that there are countless backups in Meraki's data centers, but how do you address the people that want a local copy of their configuration? People take screenshots of their configs for a reason, the number one being documentation purposes. XML files have already been mentioned in this thread. I have text files of all the devices in my network. I'm sure others have other things they do.   Templates are great, but even templates have limitations. If there is any type of summarized route on your network and the network you are trying to create falls under one of the auto-generated networks, you can't use the template.   We need something that we can download to say "Yeah, that's my config" ... View more

No one here is disagreeing that we should be able to restore from the cloud. I wholeheartedly agree that this NEEDS to be something we can do. The point that I and others have tried to make is simple: you need to have a copy of your config somewhere. If the Meraki dashboard were down today (meaning you could not access it via the web), would you be able to tell me exactly how your devices are configured? One of the most important tools in our field is our documentation. Poor documentation leads to issues further down the line. We must always be in the mindset that we could lose everything at any moment. Be a Boy Scout: Be prepared. Look up 3-2-1 backup strategy. It means having at least 3 total copies of your data, 2 of which are local but on different mediums (read: devices), and at least 1 copy offsite. Should I be able to download a copy of my config? Yes. Should I be able to call support to restore my config? Yes. Is it Meraki's responsibility for you to have a local copy of your configuration? No. ... View more