Hi Khurram,   Did you ever figure this one out? ... View more

Hello,   Yes i did the same as you mentioned and L3 Firewall is also enabled and allow any any is set but no effect. I'll be grateful to you if you share screenshots. ... View more

Well...thinking about better solutions would be advisable then. 😇 ... View more

As @Nash already mentioned, we first need clarification if the OP is talking about AutoVPN or not. But let's assume he is.   @Network-dad it's not necessary to set them up as mesh to make the spokes communicate each other. By default the site-to-site VPN firewall allows communication between subnets that participate in AutoVPN. The packets will be routed over the hub in a hub-and-spoke configuration but it should work fine.   So @khurram , what is your site-to-site VPN firewall configuration? This is the default and should allow inter-spoke communication: And have you included your spoke subnets into VPN? In other words, is the dropdown set to "VPN On"? ... View more

I have the same problem but with ssh, my session opens and after a few seconds it is terminated. ... View more

As people have said - you must use VLAN's   There is no equivalent of port mirroring or subnet shields in Meraki world.    But for you usage, you can put switches on each port and you'll be fine 🙂 ... View more

How about redirecting the guest after login to a webpage which shows android/apple store links?   You can easily create a webpage ... View more

To make that work you would need to forward IP protocol 47 - and Meraki does not have a way to configure this.   Your next best option would be to use GRE over IPSec (or more specifically, VTI tunnels) as that uses IPSec.     However, the better solution would probably be to put an MX at the remote 2900 location and use Meraki's AutoVPN. ... View more

I had a client who was using Nextiva for their phone service.  They had a great feature where one could forward a voicemail from one user to another.  When that feature stopped working, I called Nextiva and they reported that they disabled it because it could be used to initiate calls from inside the voicemail system.   The hack worked by someone calling a company phone late at night and getting the users voice mail.  The hacker would use a dictionary hack to determine the pin, and then once inside the voice mail system they could make out bound calls.   Check with your phone provider to see if there is any way to make out bound calls from outside the system.  If there is, that may be your security hole. ... View more

One last ditch, try reaching out to support to see if they can help glean some additional information related to the change that can help you correlate it to an admin.  ... View more

i have only one network i.e. wireless. ... View more

What might be easier, is (using Meraki DHCP) give each machine a static reservation.  Then the IP addresses will never change and hopefully it will make things more stable.   Otherwise as @Spectre says, you need a Meraki switch. ... View more

@khurram wrote: I have to provide internet on same subnet IPs.   If I understand you correctly, no problem   Using supernetting, you could, for example set up 192.168.2.0/24 and 192.168.3.0/24 both of which may be addressed using 192.168.2.0/23.   So 192.168.2.0/24 and 192.168.3.0/24 are part of the same supernet 192.168.2.0/23.       ... View more

I am pretty sure he used the Wireless only - VLAN  field to tag a VLAN. but khurram it's like Philip said, you cannot use Group Policies to shape traffic on a port.   Group policies define a list of rules, restrictions, and other settings, that can be applied to devices in order to change how they are treated by the network.  So you will have to add the Group Policy to the specific device behind the port.    Go to Monitor => Clients  Search the Client you want to apply the group policy on and under the field Policy you can click on the word "normal" and select a Group Policy for that specific device.   Hope this helps!   Regards, Ben ... View more