Oh I think I mistook the 450 for the 425 sorry! But because Meraki uses standard QSFP DACs I think it should work. It won't be supported though. ... View more

I was also wondering if this works. I am looking into buying two MS450 and use them in a stack stretched across two server rooms for redundancy. With the front plane stacking I expect it to work like the Catalyst 9500 virtual stacking and I think I've seen that setup working at one of my former customer sites. (But don't quote me on that) Maybe open a case with Meraki and ask if this is something that works and is supported? The stacking cables are just QSFP cables so I don't see why a fiber module shouldn't work. ... View more

Hi SSAS, Is there maybe some traffic shaping in effect that is configured on your MX? A low download like that seems weird, especially because your upload is 900+ Mbps.  What does the uplink configuration under Security & SD-WAN in SD-WAN & traffic shaping say? What kind of SFP module are you using? Can you tell us the module name? I haven't seen a 2 gig SFP from Meraki. I run a MX105 and I can get to 1 Gbit/s up and download without any issues with IPS enabled. Probably more would be possible too, but my uplink is just 1 Gig. Since when are you running into this issue? Was there a firmware update and it started afterwards? Were there config changes somewhere in the network?   Also if the MX is having a hardware bottleneck that should be visible under Organization -> Summary Report and then select the Appliance network. The utilization will be visible in the bottom left corner. Otherwise support will be able to tell if there is a hardware bottleneck. They have access to more data about the appliance.   ... View more

LACP isn't supported on the MX. But there are topologies that Meraki recommends with Spanning-Tree: You can find them in their documentation:  https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair#:~:text=USB%20cellular%20dongle.-,Recommended%20Topologies,-There%20are%20two ... View more

What version of MacOS are they running? There was a bug in MacOS 10 that causes disconnects due to the AWDL interface: https://www.meter.com/mac-osx-awdl-psa I had a few users reporting disconnects until I updated them to the latest MacOS release. ... View more

Hey RaphaelL, I saw that Intel released a new driver in June (22.230.0.8) which also says they resolved an issue with clients not able to connect to specific wireless APs. So might be good to check it out: https://www.intel.com/content/www/us/en/download/19351/windows-10-and-windows-11-wi-fi-drivers-for-intel-wireless-adapters.html Just installed it and will test it out on my Dell Precision 5550 with an AX201 card in the next days. Not sure if I can get a capture. The issue happens super randomly for me... ... View more

Pre-Auth is a fairly old feature that predates 802.1r and even OKC. If you enabled Key Caching on Windows and 802.1r on Meraki that should already help with roaming by a lot. ... View more

Hi Captain666,   I can see the uplink port is running on reduced speed. Where is that connected to? Are the switches actually rebooting or do they just lose connectivity to the Meraki Dashboard. If you hover over the Connectivity bar it will show you why the switch lost connection to the dashboard or rebooted. Otherwise if the logs don't give you any information about why the switch rebooted it's best if you contact Meraki support to see if it's a hardware issue. ... View more

Can you also check the event log for the NPS and send the screenshots of the logged requests? You can find it in "Eventviewer -> Custom Views -> Server roles -> Network Policy and Access Services" The logs should look like this: (The picture is just an example I pulled from Google)   It should also display why the authentication to the NPS failed when you scroll down further. ... View more

802.1x hasn't changed in WPA3, except if you use WPA3 192bit. This one needs different cipher suites on the RADIUS server and only uses EAP. https://documentation.meraki.com/MR/Wi-Fi_Basics_and_Best_Practices/WPA3_Encryption_and_Configuration_Guide#:~:text=to%20be%20enabled.-,WPA3%20192%2Dbit%20%C2%A0,-This%20mode%20utilizes Do you have any logs on the NPS side that show the authentication failing? That might shed some more lights on why it's not working. ... View more

Hi Raghu, the beacon frames sent by the APs indicate that it's not pre-auth capable: That's why I didn't enable it in my case. ... View more

You could use the "Layer 2 LAN isolation" feature if you're bridging the guest Wi-Fi to a VLAN. It's under Wireless -> Firewall & traffic shaping Documented here: https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/Wireless_Client_Isolation Not sure if it works with the iPSK feature, I haven't been able to test it in my environment because we tunnel our SSID to a guest concentrator. ... View more

I ran into the same issue with the Windows clients in my environment. Enabling PMK Caching in the Intune profile and deploying it fixed it. So roaming works  now. You don't need to activate Pre-Authentication. The Meraki APs are not able to do pre-auth so having it enabled made no difference for me. What I can see is that I run into the "Invalid MIC" error now when the clients roams which looks like the error RaphaelL runs into. It happens less often than the EAPoL timeout for me, but it happens. Looks like a issue with Windows (running Win11 22H2), with the Macbooks we have I can't see the MIC errors happening. ... View more