We have two MX 105's in building A setup in passive failover mode. Along with this, we have dual ISP's to minimize any single point of failure. Everything works the way its supposed to. We have building B that is connected to A with a privately owned fiber however, that fiber connection has been identified as a single point of failure.   We are purchasing a new internet connection for building B, and we are looking at purchasing new meraki hardware but we aren't sure of the best way to set this up such that building B uses our privately owned fiber as a primary connection between buildings, but if that connection fails, it automatically switches over to using a site-to-site VPN to building A.   ... View more

We would like to create an explicit allow group policy which only permits traffic to predetermined sites/workflows. To do this we would like to use * character in the blocked URL list and then populate the explicitly named sites in the Allowed URL list.   The challenge with this approach is that we would like to allow specific Microsoft applications. On the Microsoft site: https://learn.microsoft.com/en-us/microsoft-365/enterprise/urls-and-ip-address-ranges?view=o365-worldwide it lists the names of the domains that should included in the allow list but, in many of their domains they use the * to indicate a wildcard, such as *.outlook.com, however in the Meraki rules it says that when using a * character in a block/allow list it denotes the actual * character and not a wildcard.   How can we add sites that Microsoft only defines by using a wildcard to the allow list? ... View more

I've got two MX105's in a hot spare setup along with a number of MR46 Access Points.   On the MX105 logging is enabled for flows and URL which goes to a Graylog server.   If a PC that is physically plugged into the network goes to a website I can see the source IP address of the PC and the destination IP address of the website (using Graylog). However, when the same PC is wirelessly connected to an Access Point the source IP shows as the Access Point, not the PC.   Is there any way for the MX105 to report the wireless clients IP address instead of the Access Point (if it helps, both wireless and wired networks are on the same VLAN)?   The reason for asking this forum is because the logs are coming from the MX105 but I do realize that if there is a setting for this it may reside on the MR46 so I'm hoping there is some crossover between forums.   Thanks, ... View more

I've got a user who is complaining about slow or poor wifi. The telemetry from the client history of the AP shows the device is roaming constantly between 2.4 Ghz and the 5 GHZ bands. Is this something I should address at the AP or the client? A little more background, the user was at his desk the whole time.            ... View more