In Cloud PKI, there are two different formats for downloading the root CA. You need to download the other format. ... View more

Hi ..  This has been back to normal for a while. I cant recall what Firmware resolved it though.    Currently on MR 29.6.1 ... View more

Hi do you have a source for the MS425 forwarding rate please?  Struggling to find anything online. ... View more

I suspect that your install team is manhandling the cables, not realizing the consequences. This should not happen if the install team is certified in the OEM's system of cable installation.   If you certified the channel that means its inclusive of patch cords on each end. if you take your cert machine and place it on the one of the offending channels what is the result?   Here is an example of a well intentioned  rookie Installer who thought this was permissible when installing the AP end of the cable into the cable well. This caused all sorts of issues from  100Mb connection to AP that would receive PoE but showed no signs of life. This is a Panduit CAT6A cable. Out of 40 APs installed the 12 this dude touched was hosed.       Installing cables with a boot requires that you take your time and be carful not to tweak the cable or else the internal spline will help your conductors  separate from the pins. I would recommend new patch cords WITHOUT boots and of the small diameter (28 gauge) variety. When installing remove the AP and carefully thread the patch through the mounting bracket taking care not to tweak the end. I would hold the body of the cable about 6 inches back and guide it into the well. It will in fact, be close quarters when installing the cable into the well. Your installer will have to be careful to not "abuse" the cable when pulling slack back to the mounting bracket https://www.panduit.com/en/products/copper-systems/patch-cords-accessories/patch-cords/utp28x7bu.html   I don't have a cat6A at my desk but here is a sample of the Panduit  CAT6 standard vs a CAT 6 small diameter. The size difference is easily seen and makes installs a little more forgiving in tight quarters.       ... View more

Same here, turned a couple of days ago no adverse effects either.  Just 1 jammed AP mitigated.    Hopefully we will see more detail on the page in the future  ... View more

Thanks for the info  ... View more

I think Meraki are dissuading people from buying the MS390... ... View more

Yes you can ... We have networks in UK,EU,US and APAC under one dashboard. From what i know the AP's will already know which regulatory domain they should be in based on  the shipping address when you buy them. If you need to change them then do as previous replies.   The only place you cant use the global meraki.com dashboard is China! where you have to setup under meraki.cn dashboard.     ... View more

We have pretty much the same setup as @AdBurl. Recently added CW9166 to our fleet with MS355 Mgig switches.  We thought .. why not might as well get the mgig switches too.  All new locations will go this way too.  If you have the budget you might as well. ... View more

Yeap, the upgrade to 28.7.1 fixed it for us. ... View more

Thanks for that    Most our clients range from 48-70db Just a few mobiles around the 30db No others below 30db     ... View more

Thanks for posting all this, really helpful and interesting bug.  Don't get me started on the transparency of these things from support!  I also live in fear of the next release, so far 29.2 in an office of about a dozen MR56 APs is working ok.  Only 2 weeks in though so often these things take time to rumble to the surface.  I'll post here with anything I find though. ... View more

I heard that google didn't like devices pinging 8.8.8.8 constantly and they start rate limiting the IP, not sure how true it is.   Don't understand why Meraki don't ping the parent Cisco open DNS servers ??     ... View more

This is still an ongoing issue - See the thread on the subject at the URL below for all the details: https://community.meraki.com/t5/Wireless-LAN/MR46-MR55-WIFI-6-AP-s-disconnect-from-dashboard/m-p/149868#M20809.   I'm running MR56 WAPs with 28.6.1 and they are unable to stay connected to the Meraki cloud for more than a few minutes a time. Going back to 27.7.1 is not a great option due to bugs fixed in 28 code.     ... View more

Sure you can we have the same switches  but as @rwiesmann says not on all ports    If your switches are stacked, you can split the load between the switches so you don't go over the power threshold for the LP model switches. ... View more

I get this bit too, however i have seen major slow downs when an AP becomes a repeater, to the point where dns is even un-workable. It gets worse than dial up.  ... View more

Hi All thanks for all the replies and interesting thoughts/comments   For some extra info (didnt have time to draw it out but topology is bascially)   MR56 Access points >>> 6 X Stacked MS225  >>(2 x10g aggregate) >> Stacked MS425-16 (core switch) >> (2 x 10g Aggregate) >> Fortigate F series FW >>> Internet     I have always gone with option 1 where there are no internal services, and i am thinking option1/2 for this one. however this one is the biggest site.   All devices will hang off the MS225's   There will be internal video/audio streaming the rest of the traffic is cloud apps.   Once decided the Vlans wont increase so max < 8 Vlans   My ideal would be to keep the corporate and servers/video internal and everything else on the firewall.  Its just whether i want to have the extra overhead in  admin for option 2.   Think i might have answered my own question ...       ... View more

Thanks again this helps a lot, A different Switch it is then    But this bit i didn't know or think of    WAN-switch should be in a different dashboard network as the system doesn't like it to see traffic twice.     Makes sense  ... View more

Joe, let me preface this by saying its nice to have someone else to talk to about this stuff. Although it seems like we might be going off on a tangent from the original topic, my response was still oriented around the uplink port being 1G or higher as a requirement.   What I am getting that currently its only in lab scenario's, or 80MHz environments (rare) where we can push over 1G, however with more clients on the AP (such as very high density VHD) your overall total AP throughput will decrease due to contention.   Also, it has been many years since I did anything close to a VHD installation, so my 200 - 500Kbps was from memory. So you forced me to dig up some old documents I referenced at the time.   I also have limited experience with Wi-Fi 6 (as I assume most do still), so I can reference this link here which covers it some:   https://divdyn.com/wi-fi-throughput/ To clarify, I'm talking VHD with tens of thousands of clients. The RF is the limiting factor at such scale, pretty much any AP vendor has the hardware to handle excessive client counts these days, but you won't be able to squeeze much when you have 100 or more clients on a radio, due to the RF itself I mean, since its a finite resource etc.   I can't imagine any scenario in a VHD setup were you would be running anything other than 20MHz, so that alone (just looking at MCS rates) will be the determining factor of total throughput per AP. Even a 3SS client (laptop only in this example, since handhelds don't go above 2x2 that I'm aware of) at MCS11 is 366Mbps, then cut that in half because wifi 😃   Example 20MHz AP with 100 1SS clients 72Mbps * 50% / 100 = 360Kbps Realistically it would likely be even lower since the 50% is more like 40% due to contention and fall off. So more like 250Kbps each.   To be fair there are a million scenario's that I'm not accounting for, so yes good TPUT can fluctuate all over the place. However when dealing with numbers at such scale, it's been my experience that math has to be performed to get a rough idea of what we are looking at to set expectation with client etc.   Some links from Aruba (which I consider the holy grail for VHD design) from people who have a thousand times more experience than I do with VHD deployments.   https://higherlogicdownload.s3.amazonaws.com/HPE/MigratedInlineFiles/7bc8710bbc014229a17041f8f5a5e6f8_Aruba_VHD_VRD_Engineering_Configuration_Guide.pdf   https://higherlogicdownload.s3.amazonaws.com/HPE/MigratedInlineFiles/7bc8710bbc014229a17041f8f5a5e6f8_Aruba_VHD_VRD_Theory_Guide.pdf   https://higherlogicdownload.s3.amazonaws.com/HPE/MigratedInlineFiles/7bc8710bbc014229a17041f8f5a5e6f8_Aruba_VHD_VRD_Scenario1_Large_Auditoriums.pdf   https://higherlogicdownload.s3.amazonaws.com/HPE/MigratedInlineFiles/7bc8710bbc014229a17041f8f5a5e6f8_Aruba_VHD_VRD_Scenario2_Large_Indoor_Arena.pdf   ... View more

We have a number of sites with FortiGate FW and Meraki, Where we run FGT 30E's with MR56 AP's, albeit these are being upgraded in due course to 100F's but as it stands now we don't see any issues reported where bandwidth is concerned.  Our user counts for these sites are 60-80 users.  Your 100D will be just fine until you are ready to upgrade but do take advantage of the Fortigate upgrade program where they will exchange a 100D/E for a 100F at a significant discount with licence porting. Not sure about the MX firewalls though we have 1 but i find the FortiGate's to be much more feature rich 🙂  Sorry Meraki crew 😊   ... View more

I'm thinking something had to change with Meraki, Being redirected to the splash page was working just fine until a week or so ago. Now all of a sudden after the timer I as well stopped getting the redirect. Have to disconnect the wifi and reconnect, and manually open a browser and go to nasa.gov to be redirected. ... View more

802.11ax is the standard (well, technically the amendment, but that is not important here). The WiFi-Alliance runs the certification program for the devices: https://www.wi-fi.org/discover-wi-fi/wi-fi-certified-6 ... View more