hmmm, i may have to resort to that, thanks! ... View more

Hello,   Sry, I'm a little confused..."why is the client challenged?" Its a standard part of the authentication process. After the client initiates the connection, the RADIUs checks its policy and if the client is allowed, it will send the client an access challenge request that asks the client to proceed. They then start a TLS handshake. During the handshake, the server does send the client its certificate to prove who it is, and i wondered if it could be an issue with that cert - but our RADIUS servers look after about 60 different physical sites and there isnt an issue anywhere else. I will try to get a capture but it will be difficult to co-ordinate as the site is in another country 😕 cheers ... View more

aah thank you ! this was indeed disabled 😄 now to find the culprit that disabled it lol ... View more

yes they do, sry by guest i mean it isnt their usual office. Everyone is a company employee, they all have the same umbrella install and use the same umbrella policy etc. I have checked the umbrella logs, and they are definitely not being blocked. I didn't expect that either since the problem is only intermittent.  They dont have any problems until they go this this problem site. They are fine at every other site except this one. ... View more

sweet, thanks very much! ... View more

cheers! its very helpful, but im still not quite sure how I asses what load our devices are under. First of all, the doc states maximum recommended values for each feature - but is that if that's the only feature in use? Can a device cope if its doing EVERYTHING near maximum values? Also, how do I tell what our MX's are actually doing? For example -  Flow and Session Data It is important to understand the number of flows, or open sessions, supported by each appliance. For purposes of sizing, a flow is any transmission on an open socket within the last 5 minutes.  Note that this is not a recommended flow capacity number, but instead these values are to be maximums.  MX-Series   MX67 MX68 MX75 MX85 MX95 MX105 MX250 MX450 Maximum Concurrent Sessions 25,000 25,000 50,000 125,000 200,000 250,000 500,000 1,000,000 So it seems we can handle 500,000 "flows" in 5 min. Great, but are we operating close to that? over it?, no where near? The nearest info I can find is in "traffic analytics" which can only give me a 2 hour timeframe and divides the flows up per application. I could export to CSV to combine the flows for a total over 2 hours and get SOME idea but its not exactly precise is it? Are there other performance/activity tools im missing somewhere? Would the MX alert if it was getting over-worked? cheers. ... View more

Hi, thanks for the reply - but this is about syslog messages. If the meraki logs didnt truncate the messages, then there would be no need for the syslog server but since they do, I need to understand what is generating the messages (which firewall, which rule, whats the content filter doing?). ... View more

hello, we have mostly MX250's on 18.211.2    and MR46's basically, I want to be able to whatever traffic is being blocked. Id like to know, what did the blocking (was it the content filter or firewall? if its a firewall rule, which rule), also exactly what url / ip /whatever was blocked. Right now I have lots of logs that say "flows deny" with a src/dst ip, a mac and a protocol. - What is that? Is that a firewall rule? which firewall? which rule? In my MX firewall rules I have selected certain ones to log to syslog  how do i find those in the logs? how do i see what the content filter is blocking? thanks! ... View more

cheers! ... View more

cheers, this isn't for replacements but more for new purchases. I know they say they will support it through to 2030 but we have older models they said would be supported through to 2027 and we are already seeing a drop off in compatibility with new firmware. I assume they just haven't released the replacement models yet and will probably do so before this lot are end of life in a year?  ... View more

they were my first go to as well, but then I had to deal with their website trying to find exactly which of their stupidly named products were in fact bridges, and then hardly anything was available! ... View more

fraid not, that was the first option we looked at 😞 I just found these airMAX NanoBeam 5AC - Ubiquiti Store United Kingdom going to see if they are available anywhere ... View more

also noticed this... As a general wireless networking rule, each wireless hop in a mesh network reduces the throughput of the link in half. As a result, wireless mesh networking may not be the most viable solution for environments that are required to support high-bandwidth or latency-intolerant applications. Meraki recommends limiting the amount of wireless hops to one (1) unless more are absolutely necessary to serve additional wireless clients. one of the things going over this link will be a bunch of high-definition live security camera steams - dunno if that counts as latency-intolerant but i wouldnt be surprised. ... View more

Cheers, that's quite interesting. So I can plug the remote AP into a switch and the connection will pass through? What about range? I cant really purchase the APs, hire in the cherry picker to mount it only to find the signal isn't good enough 😕 ... View more

nuts 😞 ... View more

although - there is the alert for "port changes link speed"  - would that cover an aggregated link speed changing? ... View more

the problem is that when you aggregate the ports, the individual ports become no longer available for any kind of editing so I cant tag them 😞 ... View more

bump ... View more