@PhilipDAth wrote: Those max power settings are WAY too high.  The min power settings are WAY too low. Compare it to the screenshot I provided. Excuse my ignorance, but what's wrong with having each band transmitting further and shorter? Does this not maximize the coverage area? A narrower margin shortens area coverage.   Looking at templates when creating a new profile, there's the one called Auditorium, to accommodate a large number of devices. It optimizes roaming, which is good, but it limits the coverage area per AP. What happens then with areas that don't have the best density? I guess I can assign this profile to the APs when it won't affect anyone and walk around to see if roaming improves. It could be a very short test - if I change what I have to Auditorium, which that is quite different, and the issues continues, then I'll go back to the plan of opening a case with Meraki and looking into the DHCP situation. The documentation you linked me to mentions AutoTX Power, and I would totally try that, but I don't see it anywhere in the configuration of the profile ... View more

@PhilipDAth wrote: Those signal strengths are very low.  Have you got enough APs?     Based on what you say that, the roaming log? If yes, precisely the low signal as I walk away is why it should roam. It's roaming from upper 70s / lower 80s to 50s and 40s.   Yes, I have 40 APs. Again, as I walk away from the one I am associated with, I roam to another one.   Do you see anything wrong with these?   ... View more

@CarolineS wrote: Hi @Gopinath_Pigili - Was this response generated by AI? If so, please cite your sources, per community guidelines. oooohh... you know? I still don't expect these kind of things, I'm old school and believe that someone took the trouble, but the neat presentation along with the inaccuracy makes it very possible.    Freaking AI came to ruin things even more.  ... View more

I'll open a case, thanks! ... View more

@alemabrahao wrote: It sounds to me like you're having a connection quality issue and that may be a contributing factor, it's worth reviewing your RF Profile settings under Wireless > Configure > Radio Settings > RF Profiles > [Edit Profile]. I'd also recommend contacting Meraki support so they can help you determine the root cause of your issue. I'll open a case. I don't have a connection quality issue. Thanks for trying. ... View more

@alemabrahao wrote: I'm talking about the option circled in red. Is this enabled? Yes, it is. ... View more

@PhilipDAth wrote: Check the roaming log for the client in the Meraki Dashboard.  Does it keep breaking on the same AP?  Does the dashboard so any other issues?     Maybe you're onto something here...    I started looking at logs for my device. The roaming log shows only four roams although I was there two days and moved around a lot:   The timeline shows only 10 entries for the 4 days; again, way too little considering how much I move and how many access points I walk past.   And among those 10 entries, three are errors due to the DHCP server (Meraki) rejecting the client’s request.     ... View more

@alemabrahao wrote: Nope, I'm talking about auto reconnect.     So we are talking about the same. That is the saved SSID in your phone. ... View more

@BlakeRichardson wrote: Knowing what kind of device is going to be a big help in trying to fix this for you.    MacOS use to have a priority list which was awesome but they got rid of it for whatever reason.  If you devices are company managed I would be managing their Wifi using an MDM. Both are Samsung smartphones. I've been having this issue for a long time, I have an S25. I didn't know if it was affecting anyone else, but today a user told me he has the same issue. He has a Samsung Fold. We don't have company managed mobiles ... View more

@Mloraditch wrote: What type of ssid is it? Nat or dumps to a vlan? What type of encryption/authentication? Do you have a mix of different ap models?   How exactly do the clients react? You just have to tell them to join or have to reinput keys or authenticate otherwise? 1. Meraki NAT 2. WPA2 3. Yes, mix, it's a big building with 40 AP's, but it's quite possible that the path that I take often (my office to the restroom) is all the same models - MR46's. 4. The credentials stay, we just need to reconnect manually as if auto reconnect was turned off, but it's not. ... View more

@alemabrahao wrote: What type of device is the problem occurring on? Do you have auto reconnect enabled? What type of authentication is used?   1. Two Samsung smartphones, that I'm aware. An S25 and a Fold. I changed the MAC randomization setting on mine to test but it didn't make a difference.   2. I assume that you are asking about the saved SSID on the phone, in which case, yes.   3. Password. WPA2 ... View more

@KFoster wrote: I believe I understand what you are trying to describe. Ultimately, your edge firewall will make the decision to allow or block that traffic, regardless of what the endpoint is configured to point to for DNS.   I would recommend reviewing the DNS policy options that are available for your specific ASA platform, but here's an example: Cisco ASA with FirePOWER Services Local Management Configuration Guide, Version 7.0 - DNS Policies [Cisco Secure Firewall ASDM] - Cisco   Once you have a network object created with the FQDN of site you are trying to block, you can then define an ACL rule where the subnet for that specific SSID is not allowed to hit the external resource. This assumes you have a separate subnet for each SSID / network. Thank you ... View more

@alemabrahao wrote: Meraki won't give you the level of granularity you want. Clearly! But I think it should    ... View more

@Blue_Bird wrote: 1.Log in to your Meraki Dashboard.   2.Go to Network-wide > Clients. Use the search bar to enter the website domain (e.g., facebook.com) — this can help you identify which client accessed it. You can also filter by time to narrow down to when the access occurred.   3.Inspect Client Details Click the Client name or MAC address. Review: SSID they were connected to: Device type, IP address,Hostname, Usage and traffic details, including visited web domains   4. Use Event Logs Go to Network-wide > Event log. Filter by Client MAC or type of event (e.g., "Content filtering block" or "DNS request"). This can help validate web access history.   Thanks This doesn't work. Once I have the list of clients, I type a couple of websites in the search bar that I know were visited and I get a "no matches found" ... View more

@PhilipDAth wrote: If it is high usage "now", look at the top applications used in the last 2 hours. I find good info there, but not what I asked. I can go to Network-wide, Clients, click on Application Details under the pie chart, and I see "applciations", not websites. I can click on an application, say "Miscellaneous secure web", I can see clients contributing and hosts contributing, but nothing linking client to host.   Moreover, under the pie chart and graph there is the list of hosts. I can sort by Usage, click on a device, and see connection history but not what sties have been visited. ... View more

@Mloraditch wrote: Meraki reporting is not great for your specific need. You can say that again! It seems to me that it should be quite easy and basic.   @Mloraditch wrote: Do you have MS and MXs or ? In theory in a full Meraki environment with content filtering enabled where you were offloading logs to some sort of Syslog you might be able to track it down but if you didn't enable any sort of log/netflow offloading ahead of time you are going to be limited in your options. I don't have Meraki anything other than wireless. I have a now older Cisco ASA. It does offload logs to a Syslog, but it's only keeping a day's worth of logs fue to storage space. And honestly, the times that I searched those logs, I found them to be a PITA. I want to believe that there is something better out there. Not that it mater now.  ... View more

@alemabrahao wrote: You can check it on Network-wide > Clients page or Traffic Analytics.   https://documentation.meraki.com/MX/Firewall_and_Traffic_Shaping/Traffic_Analysis_and_Classification Thanks for the prompt trply.   If I search on Clients page, i can't search for a domain. I can list applications, some will say the name, like "Facebook" or "Gmail", but not all wesbites are there. And if I look at Traffic Analytics, I get a list that I can sort by destination, but there are only 110 entries for an entire week for all SSIDs, and it's gotta be wrong. We are a public building and had over 15,000 people in the building this past weekend alone. Only 110 lines for a whole week?   ... View more

@KFoster wrote: DNS sinkhole. Configure a rule to block http/https to the fqdn of the destination. I use different DNS servers per SSID. For Guest I have OpenDNS, for business associates Meraki Default, for corporate laptops my in-house DNS... I wanted one rule to block for all SSIDs ... View more

@DarrenOC wrote: Do you have a Meraki MX in your network? No. Cisco ASA firewall, about to switch to FortiGate ... View more

@Mloraditch wrote: You have two options one is you would need to hand your wireless off to a VLAN that is built in your MX and then use a group policy on that vlan to do the blocking   https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Creating_and_Applying_Group_Policies   or you can use layer 7 rules per ssid https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Creating_a_Layer_7_Firewall_Rule Well, I didn't want to go per SSID but the other option is even more involved, so I will do each SSID individually.   It seems to me that it should be an option to do this network-wide.   Thanks for the prompt reply. ... View more

Thanks, but certifications and the Meraki Community account history are minor to me. What about the case history in My Devices, the Cisco Commerce Subscriptions & Services, Cisco Software Central...? As convoluted as it is, because everything should be under one portal and it's not, at least it's there. Adding more confusion to the mix is not what I'm looking for.    My only issue is that at one point in the future I may stop renewing the old domain name and so I will stop receiving emails sent to that address. Then I will have no choice. But hey, maybe by then Cisco will finally get their act together and I will be able to just simply change my email address, like I have done in the dozens of other sites where I have an account, right?    ... View more

Nope, I'm an end user - I manage the IT department of my organization. ... View more