Hi @JordanCN , This would be a web browser cookie situation, I've tested this many times. Here is how I resolved this. 1.) Go to the Dashboard page you prefer. Note the time/date. 2.) Logout of the Dashboard. 3.) In you broswer history. Delete all entries of the Dashboard. EXCEPT the page preference... NB, you might need to add a column to see time/date that page was visted. 4.) enjoy... 😀   ... View more

With WAN failover set to graceful existing connections will continue to remain failed over.   For example, with WAN 2 as primary, if WAN 2 goes down, connections all failover to WAN 1. When WAN 2 comes back online, new connections will go out WAN 2 but existing connections will go out WAN 1.   If you want all connections to immediately failback to the primary uplink, you need to change WAN Failover to Immediate. while new connections start  ... View more

Same issue here.  Really pissing off the users.  We have Disable Captive Portal Detection "enabled" and still have the issue.  It still pops up when in the office behind the MX.  Does seem to happen when network connectivity changes occur.  AC event logs indicate it's still trying to contact the portal.  ... View more

I saw that updating my profile xml enabled the users to control the Captive Portal Detection, but as you noted, even though I set it to True and True, the setting did not check the box.  Each user had to go into the Anyconnect settngs and check the box.   I discovered that when they set the option to Disable CPD, the setting got applied to the preferences_global.xml file under the <ControllablePreferences> section.  This entry was written:   <DisableCaptivePortalDetection>true</DisableCaptivePortalDetection>   Preliminary testing looks good. I had a person with this issue happening repeatedly and it appears to have stopped. ... View more

Thanks for the info.  Is there another load blancer that is compatible with Meraki?   I am trying to setup 2 web servers that are running the same application.  I wanted to use the build in NLB so it wouldn't look sloppy by having 2 links to the web application incase one of the servers was under maintenance or the physical host for that server was offline.   I know I could put in another VM for a load balancer, but then that adds a third VM and my goal is to keep as few VMS as possible. ... View more

Trusted Access is an additional license and does support Azure AD authentication for device setup. ... View more

I share your frustration.  They do work very differently to a standard MS switch.   These units were designed around a Hotel use case (hence the "H" in the name), where you want WiFi in the room, and some wired ports. ... View more

What..................................................... I really wish all these secret options they can configure for us is made public knowledge somewhere. How are we supposed to know?! ... View more

So I put in a ticket with Meraki support about the xml extension doubling up and also having to enable Profile Update to get the OnConnect to work.  They said since I figured out then it really isn't a bug.  NIce....... ... View more

Hi Phillip, I use the older Z1 devices now for my home office and some others, but it would be very cumbersome for the team to take them on the road and very expensive for each home office. Thanks for the suggestion. ... View more

Hi t4alha, Every device is different.  You will have to check the documentation for the device that your ISP gave you.  For example on my backup internet connection I am using one of those Verizon wireless gateway devices that give private IPs.  I had to go to the Port Forwarding tab and forward Port 443 to the external IP of the Meraki MX.     I am using the AnyConnect client for VPN access which is why I use 443.  If you are using the built in Windows client, I think it is 1701 or 1723.   Anyway, you are going to have to work with your ISP who gave you the device to figure out how to forward the ports needed. ... View more

+1 for wireshark/packet captures for this. Meraki's traffic analysis leaves much to be desired when digging into specific bandwidth spikes. Much better to gather up the raw packets and use Wireshark's analysis tools to figure out your top talkers (and what they're talking about). ... View more

I was looking to do the exact same thing, as we have multiple sites that we currently route back over an MPLS network and out via an ASA site-to-site VPN from our DC to a 3rd party monitoring provider, the WAN IP's can float between DC's for resiliency meaning multiple sites only need a single VPN from the DC.  The MPLS is going, and all sites will have MX's installed and was hoping we could do the same thing with them, but looks like it's not possible.   I am hoping a feature request has been put in for this and we will see it one day? ... View more

I don't know the answer.   Try checking the wireless event log and see if anything appears there. ... View more

Well, that's what I call optimizing! 🤣 ... View more

@JordanCN : https://community.meraki.com/t5/Wireless-LAN/Sponsored-guest-reporting/m-p/28454#M4528  ... View more

Hi cmr,   Yes, I am in a Windows domain.  I am using Windows Network Policy Server to validate the clients and have my RADIUS options setup in the console.  I followed Meraki's suggesting on setting up NPS to validate users so this works very well for the computers, but they seem to be able to connect their Mobile devices to the secured wireless by entering their company username and password.   I thought I would add Domain Computers to the access policy and remove the users, but this only allows the computer to connect to the network.  Once the user logs on, they are disconnected.  Having both my Wireless User and Domain Computer groups in the policy treats this as an "OR" so the computer OR user can connect to the wireless.  There does not seem to be a way in NPS to specify the computer AND user are required. ... View more

While this should work on paper, I wouldn't recommend this design.  Ideally, strive for a loop-free design.  My personal guess - you have 1 to 2 outages per year caused by the redundancy of this design, and probably no outages if you make one switch the core and simply cable both other switches back to only the core.   My personal experience is mal-functions in spanning tree make the network more susceptible to outages even though it adds more redundancy.   As you indicate, you could get a pair of MS210-24P switches and hardware stack them, and dedicate them to being core switches. ... View more