Not a fan of 'security by obscurity' here - I would suggest that if knowing a public IP causes you a security problem, you need to address that security problem ... View more

Yes, really we need a way to carve out API resources so we don't impact, or are impacted by other API apps. @Oren please please please! ... View more

There are some nice Org wide calls for this now (some in beta), so scaling to thousands of switches on a 5 min polling interval via the dashboard API is totally possible (we do this!) ... View more

Hi,   Are you talking about this Dashboard latency:   Or this latency dashboard page:   The API call you've mentioned gets stats on the latter, and these Latency, Jitter, Packet Loss and MOS values are there to support the SD-WAN performance based routing functionality and are only collected either if one end of the tunnel has dual uplinks, or you ask support to turn it on if you only have single uplinks.  ... View more

Yes that's the correct API endpoint for Cellular signal strength. I'm afraid the Meraki documentation on that endpoint isn't the best, give me a shout if anything doesn't make sense as we use the call a lot.   Martin ... View more

Do you want to do this as a historical availability or do you want something more real time? If you're just interested in historical getOrganizationDevicesAvailabilitiesChangeHistory is your friend, but note that anything down for the whole period or up for the whole period won't be included. If you need a real time view, ideally combined an occasional call to getOrganizationDevicesAvailabilities to get the whole estate, with then changes caught from getOrganizationDevicesAvailabilitiesChangeHistory   If all of this sounds too much like hard work, the Meraki Ecosystem partners have your back - Cisco Meraki Marketplace | Cisco Meraki ... View more

Hi David,   I don't think it would be possible to get an exhaustive list of User Agent strings as they can be whatever the developer wants them to be, but you might be able to get a list of the 'big ones' from the Meraki Ecosystem team. Let me know if you want some introductions to that team. Meanwhile though, the Highlight string this month is "Highlight/24.11 HighlightSLM" with the first string being the <app name>/<version> and the second being company name (this is the format the Ecosystem team asked us to follow).   Also take a look at getOrganizationApiRequests as that includes the user agent string being used, which you could then use to filter getOrganizationApiRequestsOverviewResponseCodesByInterval   M. ... View more

@CoreyDavoll1 If you want I'd happy to give you access to our service observability platform which you can integrate in with Meraki and see if it gives you similar results? Drop me a private message if this sounds interesting and we'll organise from there.  ... View more

I'm no expert on PRTG logs, but to me that reads like Meraki are reporting the interfaces as failed? No sign of this on the Meraki dashboard? ... View more

Very happy to help! ... View more

Swap MX to LAN side Ethernet cables 🙂 $10 bet is still on ... View more

You can install the ThousandEyes agent on the MX itself. Do you have 'Insight' on your dashboard with your spoke network selected? If so, the TE integration option is in there:   ...but, TE on the MX won't see a LAN side issue which I'm almost certain this is. You can run TE endpoint agents on devices on the LAN which will spot that, but to my point in my earlier reply, replace the cabling on the LAN side of the MX and I reckon this will fix your problem. ... View more

I bet you $10 this is an Ethernet duplex miss match issue on the LAN side of your spoke MX. Do you have access to the ethernet switch so you can look at the stats on the port that connects to the MX? I'd strongly recommend trying a replacement Ethernet cable or cables and patch link of the switch isn't next to the MX. ... View more

Thanks @cmr - I was also wondering about MTU  ... View more

How frustrating! Your other post suggests you were also getting slow speed tests using iperf? That suggests it's not an SMB issue (although as @RaphaelL has said, SMB is very sensitive to any kind of network issue). I hate to say it, but I think you have lower-layer issue, something like an Ethernet duplex mismatch on one of your ports? You should be able to spot that as low level packet loss which will be enough to kill SMB but not enough to be problematic for most other web based apps. Try something simple and replace all the Ethernet cables that plug into the MXs? Also if you've got Advanced Security or SDWAN+ licencing on the MXs, you could run a ThousandEyes trial which should spot that? ... View more

Not exactly an answer to your question, but there are some very good Ecosystem partners that do exactly this (I don't work for either of these, but know them both well and trust them):   Boundless Digital DevNetApp.io - CAE   ... View more

Is there anything in particular you're getting stuck on? If you're using the Meraki postman collection, make sure your environment has your dashboard API key (assuming it's the dashboard API you're interested in?) set against apiKey, and then with the collection open try sending a getOrganizations to see if the key works. From that call you can then set the OrgID in the environment and go the next layer down to try getOrgNetworks or getOrgDevices and on you go.  ... View more

Hi, I have 11.18 which I believe is latest and this is what my postman screen looks like?     Are you using the very helpful Meraki postman collections? Cisco Meraki | Public APIs | Postman API Network   M. ... View more

Yea who told you that @from_afar ? ... View more

I think it's important to keep in mind that the Meraki dashboard can't be everything for everyone, and while the API is well documented and accessible to all, very few will have the appetite, skills, time and money to develop their own applications to satisfy their specific requirements. That's where the marketplace comes in, and while apps cost money, they'll cost significantly less than your time in doing it yourself. ... View more

To partially answer my own question: Point-to-Point Protocol over Ethernet - Wikipedia   PPPoE discovery   Since traditional PPP connections are established between two end points over a serial link or over an ATM virtual circuit that has already been established during dial-up, all PPP frames sent on the wire are sure to reach the other end. But Ethernet networks are multi-access where each node in the network can access every other node. An Ethernet frame contains the hardware address of the destination node (MAC address). This helps the frame reach the intended destination. Hence before exchanging PPP control packets to establish the connection over Ethernet, the MAC addresses of the two end points should be known to each other so that they can be encoded in these control packets. The PPPoE Discovery stage does exactly this. It also helps establish a Session ID that can be used for further exchange of packets, and is also used to indicate termination of the session. PPPoE discovery packets are carried in Ethernet frames with EtherType set to 0x8863." ... View more

...although now you mention it, could you create a VLAN on a couple of the ports on the MX, plug the DSL modem into one, and then connect WAN1 to the other? Would the PPPoE packet make its way through the switch ports and out through the modem? ... View more