Meraki

Gateway-SF · ‎Dec 13 2023

Meraki doesn't recommend your supported setup, and it's a bad idea for security as someone can pass a ton of non-HTTP traffic through your network without the user being authenticated. The recommended config is to not allow non-http traffic and enable a walled garden with a list of specified Google URLs to allow for the purposes of opening the captive portal prompt and, previously, to get the google login screen to load.

Gateway-SF · ‎Dec 13 2023

I had a seasoned teacher with an android phone who could not comprehend step 2. It took me a few days to get to her to help. She was going Step 1, 4, 5. She didn't understand what step 2 was asking her to do, until I said - "wait, you need to click on the 3 vertical dots!" OH! She said, "they should include those directions (words) in Step 2 as a written prompt." I agree. Please send it up Joe! Overall, I'd say a few steps need more directive info, like where does the user find "Cancel" in Step 2 for iOS? I know, but you really have to come at these instructions like you are explaining it to an elderly relative (nothing against the elderly!).

Gateway-SF · ‎Dec 4 2023

Please allow Admins to set longer durations of time for the Splash Frequency. It currently maxes out at 90-days. Extending this would avoid clients from having to re-login and get stumped about the new instructions. This will reduce internal help desk tickets and client stress from delayed access to WiFi. As a school institution, I'd prefer to set the Splash Frequency to something like 10 months (300+ days). If someone leaves, I turn off their Google Account anyway and revoke their Meraki sign-in, so they also lose access to the network.

Gateway-SF · ‎Dec 4 2023

Problem is that it does require some clients, like Macs, to actually click the "Cancel" button on the captive network splash, then open a browser and paste in the escapessl.com URL. If you skip the step and just open that URL in a browser, it doesn't invoke the "Sign In with Google" button - you just get a you're not connected message.

Gateway-SF · ‎Dec 4 2023

Since you've confirmed this, please update the new splash page to include instructions for desktop clients as well. It currently only shows instructions for Android and iOS. The current page causes user confusion, loss of productivity, panicked teachers and help desk tickets. There's also missing info in step 2 for Android.

Gateway-SF · ‎Sep 27 2023

Hi, I have a how-to question that I need to verify will work as expected, or ask for a workable solution: We are a 100% Meraki network. We have an MDF and IDF with a fiber crossover. I'm having a WISP backup internet service activated that is near the IDF (the receiver is already there and the MDF is much harder to reach). The WISP handoff is a CAT5e RJ45 male that I'd plug into a port on an MS320 switch in the IDF. Will setting up Port Mirroring on the MS320 switch with an ethernet port that mirrors traffic to a fiber port on the same switch work in delivering the WISP's uplink over a separate fiber strand to the MDF ? That fiber crossover cable would then be plugged into our MX250's WAN-2 port, and I'd set up failover. Would port mirroring work in this application? Would port isolation be necessary or usable for both the source and destination ports? If this isn't the correct application for port mirroring, how would you recommend I get the WISP uplink from an MS switch in our IDF to the MX250 uplink port in our MDF? Thank you!

Gateway-SF · ‎Sep 1 2022

Update here: having the captive portal set to "block all access until sign in" doesn't allow the Google login style sheet to load, and it doesn't work at all once a client enters a password - "an unknown error" appears. If captive is set to allow non-http, once the login splash does appear, it works... assuming one can get the splash page to appear to begin with.

Gateway-SF · ‎Sep 1 2022

Our new password-protected SSID has a Google Auth login splash page set up with block all access captive portal strength (also tried with the allow non-HTTP option enabled). Many, but not all, Mac clients are not getting a splash page to be able to login. I can't narrow down a common factor as to why they are not getting a splash page. I delete and re-add the wifi network on the Mac from the keychain and known networks; eventually the splash will appear after several attempts, but this is manual and time consuming and I'm trying to get 150 people on board. So far, the Macs are those with Intel processors and are running Monterey, and most are up-to-date with macOS 12.5.1. Any ideas as to the cause and more importantly, a resolution? About network: Meraki MX250 with MS320 & 350 switches and MR42 & 52 APs. All running up-to-date "general availability" firmware. Thank you! 🤞

Gateway-SF · ‎Aug 17 2021

Seems that other Meraki Support Techs are not aware - please see Case 06890611, opened 8/17/21. Tech is saying that I must have split a combined network - but that didn't happen.

Meraki

Community

About Gateway-SF

Gateway-SF

Community Record

Badges

Re: Upcoming Changes for Meraki Captive Portal Networks/Splash customers us...

Re: Upcoming Changes for Meraki Captive Portal Networks/Splash customers us...

Re: Upcoming Changes for Meraki Captive Portal Networks/Splash customers us...

Re: Upcoming Changes for Meraki Captive Portal Networks/Splash customers us...

Re: Upcoming Changes for Meraki Captive Portal Networks/Splash customers us...

Port Mirroring as an uplink cross-connect?

Re: Login splash page not appearing! Causes, fixes?

Login splash page not appearing! Causes, fixes?

Re: Why did Meraki Rename our Group Policy's ?

Re: Upcoming Changes for Meraki Captive Portal Networks/Splash customers us...

Re: Upcoming Changes for Meraki Captive Portal Networks/Splash customers us...

Re: Upcoming Changes for Meraki Captive Portal Networks/Splash customers us...