Due to the lack of clarity (to me anyway): When you say Chromecast you mean actual Chromecasts from Google and not just devices using the 'Google Cast' protocol (there is a couple of reasons.) I'm assuming that the Chromecasts are connecting via Wi-Fi (rather than the optional Ethernet connection) The Chromecast and Guest are on different SSIDs. The SSIDs are in bridge mode and are on different VLANs As has been pointed out Bonjour forwarding is of no benefit to a chrome cast, Bonjour is essentially Apple only.   Not every manufacturer seems to implement the protocols properly properly both TiVo and Samsung devices behave quite differently to an actual Chromecast.   If you really need to use something along the lines of Avahi to permit the protocol to traverse VLANs. Chromecasts also use an ultrasonic signal to advertise their existence and to permit guests to connect was this previously used? Has there been any recent Chromecast firmware updates?   ... View more

You don't mention if there is structured cabling in place so I would also say that it's often worth connecting a device directly to the switch to rule out structured cabling issues.   It's not the first time it's been an issue in the patch panel installation. ... View more

It's a must have feature if you require it and there is no one size fits all solution If you have 5GHz issues location then you don't need to make things more difficult for yourself.   But ensure the 2.4 setup is optimal as it can seem a bit slow these days.     ... View more

As an aside, if you have a MX then set the Virgin Media router into modem mode and let the MX do all the work. The Virgin Media routers are the most willful and spiteful devices upon planet earth (Iv'e had enough of them.) If my internet connectivity falls apart I always know that Virgin have done a firmware update and caused the router to go back into routing mode again. ... View more

Have to say that I have wanted this ability for a while, even if it was limited to a couple of specific phone models to save Meraki support from calls about obscure android phones not behaving as expected. ... View more

They're also known as inline power injectors (or just power injectors) ... View more

In the past we have had huge numbers of issues where certain DSL modems don't auto negotiate the Ethernet connectivity properly with MX devices.   Hence the reason I have a Netgear DM200 where rebooting the DM200 would result in the MX losing connectivity until either the Ethernet cable was pulled and reinserted or the MX was rebooted. I'm unsure (in our case) if it's the MDI-X cable side or a strange speed/duplex combination I would suggest if possible that locking the the uplink speed and duplex between the devices and then monitor them may be a reasonable starting point.   We had a similar issue in the early 2000s with late model PowerPC and early Intel Macs requiring locked ethernet settings at both ends and making sure you use a straight-through ethernet cable (to rule out MDI-X issues) ... View more

Update: Issue seems to be resolved   Immediate VPN connection with the Android 10 r5 and the current android 9 release when using the phones existing VPN settings (i.e. I changed nothing apart from installing the Beta version)   Looks like something has changes between releases as I no longer get the following errors logged: msg: packet shorter than isakmp header size (0, 64, 28) & msg: phase1 negotiation failed due to time up. ... View more

Iv'e used both the dynamic DNS lookup and actual IP address (I know there is a configuration that you must use the endpoint address itself, but can;t remember why) ... View more

That's how the original Pixel and 2 Samsung phones are configured 😉 The Pixel 3 on Pie won't connect at all ... View more

For the customer an additional device is not an option as it's direct access to their own systems when their Wi-Fi is not available (it's a public transport system so lack of Wi-Fi is pretty often) I have the Android 10 Beta 5 downloading to my own phone to see if the issue is resolved, as it is not wise to rely upon what is published online 😉 If they stick to their usual release schedule then android 10 will be the production release by the time the handsets are purchased. Seems the lack of connectivity has been with the Pixel 3 for at least 6 months so it's a long running issue. ... View more

From previous strangeness with some Intel drivers I would ask if the issues are on APs which are using DFS channels.   I found that if you have certain Intel drivers, 5GHz DFS channels and hidden SSIDs the clients will never connect (the driver refuses to send probes on DFS channels.)   If you have visible SSIDs we got clients disconnecting, we found that the devices sometimes lost the ability to see the SSID broadcasts too. So it may be an idea to disable the DFS channels and do a couple of tests as it's an easy test. In the end Intel were pulled into the conference calls and they recommended a particular driver that improved the situation when the SSID was visible (however this was for one very specific handheld device.) Side note: In the past the EU introduced Listen Before Talk (LBT) rules for a lot of radio equipment which led to some issues about 3 years ago and I suspect the refusal to send probes to look for hidden SSIDs stems from that (and I suspect strange behaviour in their driver code date from that change) ... View more

In my case I simply created a L7 firewall rule on my MX64 as shown in the attached image (though I have disabled it by adding zzz to the URL as one of the offspring would not have been too happy if left the block in place) ... View more

Well that was quick, the swag turned up this morning and I only confirmed the address on Thursday morning.   Thought I would set the new toys on an already crowded desk and take a photo in thanks.   ... View more

@BrechtSchamp wrote: A hidden SSID still sends out beacon frames, it just doesn't contain the SSID name. Note that hidden SSIDs don't add much security. You just have to wait untill an actual client comes by and connects to know the SSID name: https://ethicalhackingblog.com/uncovering-hidden-ssids/   The problem is (particularly for roaming) is that some drivers (some Intel ones for sure) will not send probe packets on DFS channels, so unless there is a device already using the channel in question the client device will simply never find the SSID on that channel. On it's own that's enough reason never use a hidden SSID, the fact that they are useless is (now to me) fairly minor compared with the strange issue they can cause. I think I still have my logs from back in 2005 when I used to log Access points (including the hidden ones) from the top deck of a London bus and that was when the hide your SSID and limit to known MAC addresses made you super secure. BTW the customer made up the bit about requiring the SSID to be hidden to get PCI compliance in the EU.   ... View more

What channel are you using.   If it's on a used on a 5GHz DFS channel then it may be worth moving to other channels.   A lot of clients won't send probes on DFS channels therefore the SSID won't be seen unless there is other traffic already there.   Of course this may not be your issue, but it's one worth being aware of and a quick thing to check.   I discovered this when a client insisted that their card payment terminal SSID had to be hidden for PCI compliance, but certain firmware versions simply wouldn't roam to APs using the DFS channels ... View more

Have you considered getting a hold of a Chromecast and checking if that behaves properly? It's really annoying as I am now running my XBox One and TiVo via wired connections and they work fine from my phone Wi-Fi (obviously) connected phone and I didn't have to do anything whatsoever (unless I put the Chromecast etc onto a different VLAN as I don't really like household appliances being on the same network as our 'proper' devices.) I added a Google Mini last week (Easter discound in the local supermarket) and it also can startup netflix, youtube and other services the Chromecast without any issues. ... View more

I'm somewhat surprised about winning anything.   Congrats to all who won anything and thank's for the additional responses from those who don't post too often (some of those have been quite useful.)   Also lots of thanks to the Meraki folks too. ... View more

I suspect the real question is; when is Apple going to unveil their phone management subscription service? ... View more

That's good timing as I just added a method to read the AP rfProfileId to the meraki.py imports yesterday   If only nobody had noticed that the implementations team hadn't made arbitrary changes to certain RF Profiles for another couple of weeks (1700+ sites to check <sigh>) ... View more

Addendum:   I only got time to return to this yesterday afternoon and I also have no experience whatsoever of Python.   Sadly meraki.py appears to be somewhat abandoned and the /wireless/radioSettings method has been added since it's last update, therefore it's annoying to use. Anyway I have added getdevicenetdetail to meraki.py and it's called like this and it returns the serial number and rfProfileId values for the AP radiodetail = meraki.getdevicenetdetail(my_key, my_net_id, target_ser) print(radiodetail)   Add the following into your meraki.py ----- start -----   # Returns the serial number and rdProfileId for the specified AP # Make sure it is an AP that you query otherwise it will error def getdevicenetdetail(apikey, networkid, serialnumber, suppressprint=False): calltype = 'Device Detail' geturl = '{0}/networks/{1}/devices/{2}/wireless/radioSettings'.format( str(base_url), str(networkid), str(serialnumber)) headers = { 'x-cisco-meraki-api-key': format(str(apikey)), 'Content-Type': 'application/json' } dashboard = requests.get(geturl, headers=headers) # # Call return handler function to parse Dashboard response # result = __returnhandler( dashboard.status_code, dashboard.text, calltype, suppressprint) return result   ----- end -----       ... View more

Thanks,   I will have a bicker with it tonight to see if I can get something running as I only need a list of offending sites anyway.   Much appreciated ... View more

We only had issues with a couple of sites with direct connections between MX devices. However we don't want any problems so we have moved to the current recommended (indirect) connection between MX pairs. ... View more