MX67 on 18.211 connecting to 2x fully patched 2016 DCs with self-signed certificates Not sure when this happened, but noticed that I am getting a WMI error in the dashboard when connecting to either AD server in Security & SD-WAN - Active Directory. This worked from the beginning when the MX was installed. Tried a new account, know the password is right, always Have the same setup at a few other customers and they are working fine. Not sure what is different. Security logs on the DCs show the password is not right, but I know it is. Tried changing the short domain to just domain from domain.local, changed the user to user, domain\user, user@domain.local. Seeing this on the DCs:   An account failed to log on. Subject: Security ID: NULL SID Account Name: - Account Domain: - Logon ID: 0x0 Logon Type: 3 Account For Which Logon Failed: Security ID: NULL SID Account Name: svc.merakildap Account Domain: WORKGROUP Failure Information: Failure Reason: Unknown user name or bad password. Status: 0xC000006D Sub Status: 0xC000006A Process Information: Caller Process ID: 0x0 Caller Process Name: - Network Information: Workstation Name: MAC17C8D12801 Source Network Address: 192.168.0.1 Source Port: 46424 Detailed Authentication Information: Logon Process: NtLmSsp Authentication Package: NTLM Transited Services: - Package Name (NTLM only): - Key Length: 0  Could it be because of NTLM as the package? ... View more

Not sure why I am getting this when cleaning up on an old organization Cannot delete organization - it still has multiple users There is only one admin, no networks, all devices unclaimed, no licenses. What am I missing? ... View more

I posted a few years ago about SAML for Meraki Dashboard access for MSP/multiple organizations. Curious if there was any update to that. Onboarding/offboarding users is quite tedious.  ... View more

I know how to set up the virtual IP address on the WAN side for 2x MX devices in HA - 1 public IP per device and another IP address for the virtual IP.   If I am using AnyConnect, where should the clients connect? The DNS name that comes up for the virtual IP address in the dashboard?    Should there be [near] zero downtime with anything on the one-to-one or one-to-many NAT rules if there is a failover event? ... View more

MX67 with (at least) 100mbit connections at 4 different locations. Noticed getting files off shares at the data center going slow, so did and iPerf3 test. Never got over 12mbit and typically <10mbit. Running MX 17.10.2 everywhere. Dashboard speed and other speed tests are showing full circuit speed.    Had a case open for over a month and not getting anywhere. Wonder if anyone has any suggestions.  ... View more

Have the following script I used in the past to grab a little bit of information from the organization. Need to update it to grab the dynamic IP address that Meraki uses. I'm not sure what I'm looking for in the documentation. Can someone point me in the right direction? Thanks!     import requests import json #https://dashboard.meraki.com/api_docs meraki_organizationID = 'MY ORG ID' meraki_apikey = '-----' meraki_apibaseurl = 'https://api.meraki.com/api/v0/organizations/' #---------------------------------- meraki_apidevicestatusurl = meraki_apibaseurl + meraki_organizationID + '/deviceStatuses' headers = {'X-Cisco-Meraki-API-Key': meraki_apikey} url = meraki_apidevicestatusurl response = requests.get(url,headers=headers) # improve this to look at response code first #Response code: 200 #print response.text json_data = json.loads(response.text) #print json_data error = False for i in json_data: try: print(i['name'] + ',' + i['status'] + ',' + i['publicIp'] + ',' + i['wan1Ip'] + ',' + i['networkId'] + ',' + i['serial']) except: #print 'error' error = True   Guessing it needs to go at the end of the print line at the bottom. Just not sure what to add!   ... View more

Do the MS line of switches support Bonjour gateway or broadcasting Bonjour over different subnets/VLANs? Looking to have our printers and clients on different VLANs when we do a switch refresh later this year.   If not, we don't have THAT many printers, so I could put them on the client VLAN.   Thanks for any input. ... View more

Trying to figure out the best practice for setting up SAML for an MSP. Want to get away from setting up users in each client dashboard since off-boarding is a pain in the kazoo.   We're using AzureAD for SAML and it's working fine. I set up a new test account and followed everything in the docs. I used the default meraki_read and meraki_write in the roles. Test account was able to get to the two different dashboards I set up.   Now I want to have some granular control with who has access to what customers. What is the best practice for that? I would like to use AD groups, so when I add someone to a group....boom! They get access to that client dashboard. Is that something with the roles? Maybe set up roles like 'client_read' and 'client_write' and add those to the client dashboard? Or is there a better way?   Also noticed if I go to dashboard.meraki.com, the user I set up cannot log in. Is that expected? ... View more

Been doing some vulnerability scanning and it came back that all of our 6 MX devices are listening and responding on tcp/81 on the inside interface. I go to the IP of the MX internally on port 81 in a browser and get a 404   Not Found The requested URL / was not found on this server.   Does it on my MX64 at home at well, checked another MX100....tcp/81 all open and giving 404. Same error on all of them. None of these devices have port 81 open on the firewall to anything. Some don't have any incoming ports open.   Called into support and they said it will listen on all ports and reply. Not true since I can go to a browser and put in port anything and get nothing. It's just tcp/81.   Anyone have any idea what is going on? ... View more

Have an internet connection and a layer-2 metro Ethernet connection. The metro Ethernet is purely a layer 2 - no routing, VLANs, etc. Currently there are 3x SonicWALLs connected and each one has 10.1.1.1, 10.1.1.2, and 10.1.1.3 for their IP addresses. Would a Meraki MX67 be configured the same way?   I would want the internet connection to be auto-VPN and I'm sure that is not an issue. Would I think be able to do auto-VPN on the metro Ethernet? Or is that even needed? Since there is voice and data going over these connections, I would love to utilize SD-WAN.     ... View more