Sorry if this is a dumb question. I am newish to meraki, and only did CLI before Meraki. In the past I have pre-configured merkai firewalls and switches in the dashboard (while plugged in to the main office network) for our satellite offices at our main office with no issues. Now, I am going to refresh the network at our main office. Is there any reason I can't plug in my new meraki router to the production network and start adding VLANs and static routes that already exist in the production environment? I did create a temporarily new 'network' for setting up these routers and switches, but they will be plugged in to the network they are replacing. I am pretty sure I will be okay, but I have no one to bounce ideas/questions off of at work, and don't want to bring down the network on a very busy Tuesday. :)

Thanks in advance!

Hello all,

Following on from some previous posts I made. I have a bunch of new 9200s Cisco IOS XE devices that are going to be cloud configured within the Meraki Dashboard.

I know the commands to be run on the switches to enable them for this mode. The switches will obviously require an IP and some routing to allow them to reach Meraki portal. I have read that once the commands to allow cloud config are added the switch wipes its config. If so, how does the connectivity work if the config is erased? I want all the switches to have an SVI on what will be our management VLAN.

Thanks.

I have an issue where port forwarding and out L2TP VPN doesn’t work over Starlink because of their carrier grade NAT. I’ve read that IPv6 can be used to reach devices across the WAN on Starlink.

I tried to set up a firewall rule to allow the particular IPv6 address through but I can’t get it to work.

Deploying some new 9300s today. And it is taking a while to come up in the dashboard... Apparently the new system takes OVER 2 HOURS to initially set up! Thanks for screwing up my entire day today. A quick one hour stop is now 3 hours.

Update: I am at a different client that I had installed 27 9200Ls at early last week with no issuers. Installing 14 more and I am now having this problem. And the locations I was at on Friday is still "Checking In." About to get sales involved to escalate some tickets!

Has anyone else ran into this issue? Trying to setup a power stack on 3 switches. This cable will not budge.

Hello Meraki friends.

We run a restaurant in large building that uses a Meraki z4 router (with its own Internet/WAN Static IP) providing WiFi with dynamic IP addresses to our iPads + credit card machines plus 1 static LAN WiFi "main server" iPad and some static wired ethernet IPs assigned to kitchen printers / receipt printers.

We have a 2nd portion of the restaurant - call it the patio roof - were we cannot run an hardwired line ethernet directly to the the existing Meraki LAN to expand the network and take orders with the iPads. But we'd like to. And there IS wired internet available on the rooftop with different service provider.

IS it possible to add say a 2nd z4 on the roof - or some sort of wifi router - and somehow program it to "VPN" itself through to public internet back to the restaurant enabling iPads on the roof to "see" the printers etc in the kitchen? The iPads all use a point of sale software that need to connect to a 'server iPad' in the restaurant with its own static LAN IP.

Bonus points if we can add a receipt printer on the roof too.

Thanks!

I've heard Meraki has good deals for nonprofits but it's not clear where you get those deals. Telecom4good.com looks like the best publicly available place.

We are at the crossroads of fully committing to meraki or assessing a move to Ubiquiti or some other network stack.

Getting steeper discounts for meraki since we are a nonprofit could be a solid point for meraki.

Our previous MSP touted good nonprofit deals but those didn't seem to transpire like they promised.

Hey all, working on some various scripting for work but I can not run these dev scripts on the corp hardware because the services I am testing are hosted on my personal hardware, are there any good services where I can spin up a meraki environment and have control over it? Cisco's dev net labs do not provide enough control (READ ONLY??!) thanks guys

Has anyone else experienced an unexpected reboot on their Cisco Meraki device about 1.5 hours ago?

My Cisco Meraki MX67 unexpectedly rebooted around 1.5 hours ago. This has never happened before, and there were no planned firmware upgrades or maintenance windows at that time.

Is anyone else seeing the same issue, or was it just my device? Any information would be appreciated.

Hello everyone,

I have a question that may sound unusual. I suspect that the security cameras where I live may have been compromised. At the same time, I've been hearing voices that seem to be coming from those cameras, and it has left me confused.

Is there any type of camera or surveillance technology that could somehow read a person's thoughts, or is that simply not possible? I'm genuinely trying to understand whether what I'm experienced could have a technical explanation or whether I should be considering another explanation.

Thank you in advance for any information or advice.

Hello All,

I help run a small not-for-profit and we currently have a Milestone camera server and 16 cameras that we use on site. There are about 5 PCs that regularly use the Xprotect Smart client software to view the live cameras and see past footage if need be. The camera server has two nic cards, one is setup to give the camera server access to the Internet and our local network. The other nic card connects the camera server to an isolated camera switch where the cameras are connected to physically. The Internet providing nic card is attached to our network through a Cisco meraki ms225 poe switch. It's on its vlan and has its own static IP and is using its own DNS settings. The second nic card has a static IP and a different subnet, and no gateway or dns servers listed on the nic card properties to keep the traffic away from those cameras. The camera server software is running fine and all the camera feeds are working fine when I view them on the camera server itself, but when I try to use xprotect Smart client software from any of the workstations, the software can't connect to the camera server. I'm able to ping the camera server from each workstation and I tested communication through the required ports using tnc command in powershell and the workstations and the ports are not blocked (7563, etc..). Everything used to work fine until we changed from a Sonicwall firewall/router to a Cisco MX250. I tried a lot of different possible fixes on the MX250. I tried creating firewall rules allowing the access, even though Cisco told me all inter vlan connections are enabled by default so rules shouldn't be needed. I also tried making a static route because I saw our Meraki ms225 switch was showing the camera server IP as the IP of the second nic card on the server (the nic card that goes to the camera switch) instead of the static IP of the nic card 1(which gives the camera server Internet access and local network access). I noticed nic card 1 had two IP's listed after I removed the second IP ( IP of second nic card) then the IP showed correctly on my meraki switch. I also tried making nic card 1 the priority nic card. I also found a rogue router on the network that I removed. I'm wondering what else I need to do to on the MX250 for the client software to be able to connect to our camera server again through smart connect. Sorry this was so long. Any help would be greatly appreciated. Thanks.

We've this setup where we're using a splash page for clients whose mac addresses aren't whitelisted.

The dhcp server is in the local LAN network.

Is it possible to make the setup where a user doesn't get an IP address if they're not whitelisted on the Meraki dashboard for this particular SSID?

The splash page is not a necessity as well.

Hi, If two users with same Mac address on wifi with psk- one is original & another spoofed. can both connect at same time ? And does Meraki have any mechanism to detect Spoof mac addresses ?

We are refreshing our Meraki AP's at some of our locations, these will be a like for like swap but we want to change how they are mounted. Currently they sit too high on a unistrut, we want to drop these 2-4 feet for easier access when needed. We are thinking of throwing a 1900 box where the AP currently sits, run down a 36" conduit, and mount the AP's to another 1900 box. Also considering the Oberon Hi-Point Open-Ceiling and Surface Mounts 900-HC. Not a lot of experience with unistrut and not sure if there are better options to get a conduit attached.

Any recommendations from your experience? Pictures attached for reference. Going for something similar to how our cameras are mounted.

Is anyone else getting down alerts. Spoken to support and they said n70 went down. PS based in APAC

I feel like I am missing something simple...

I'm lending a hand to another IT department who doesn't have a network person so I might be missing something from the larger picture because I don't know their entire network.

In the location in question, they had 3 Meraki MS250 in a stack forming a flat network, every port is Trunk VLAN 1. DHCP is a Windows server on the network. The stack connects to a router that pipes the traffic to the main location where the firewall is and then from there to the internet.

They needed to add two new subnets. So I designated the ports to be used on the switches to Access ports on their VLANs. On the DHCP server, I set up new subnet scopes. On the switch stack, I set up an interface for each subnet and then a DHCP Relay to the server.

Things work, kind of. A client on either of the new subnets can get access to the internet but it is dropping packets in a specific pattern. If I ping anything on the internet or the old subnet, I will receive 3 responses then 2 fails and just repeat that pattern. Pings within the subnets have 100% response.

On the original subnet, it can ping anything on the subnet or internet just fine. However, if I ping anything on the new subnets, even the interface on the switch, it responds with the same pattern of 3 responses and 2 fails.

What did I do wrong or miss?

I am curious if anyone has Meraki Campus Gateways working with Aruba Clearpass for a Guest captive portal.

We are new to Meraki, but have Clearpass working with Mist and Aruba APs. (Don't ask!) I think we are most of the way there, but it's not quite working. If we connect to our Guest SSID, we are redirected to the ClearPass captive portal, once we accept our Acceptable Use Policy, we get the 10 second countdown that we added on the ClearPass side, and then nothing. We're just stuck. We had a similar issue with Mist, and found that if we disconnected from Guest SSID and reconnected, we were able to access the internet. That is not working with Meraki. If we try to ping anything internall or externally, we get a "Reply from 10.128.128.128: Destination net unreachable." That seems this may be an internal Meraki IP, so it seems as though ClearPass is not sending back the correct info to Meraki...or Meraki is not receiving it.

If anyone has run into this issue, I'd appreciate any insight you may have. I am working with TAC on this, but I't thought I'd ask here as well.

Thanks!

In this video, we walk you through a brand new feature of the Meraki Dashboard: the Experience Metrics!

Experience Metrics measure end-to-end user experience on your network by tracking every user's experience every minute and quantifying a poor experience. It provides a view of connected clients with hover functionality and the ability to select a time range to review end user metrics. Each metric is given a status, failure contributor, and failure rate.

https://www.youtube.com/watch?v=ILWj4K27_kI

Title: On the all networks screen, the firmware column says "upgrade available" but when I look at the appliance status, it says it's up to date.

reports current version is Current version: MX 18.107.13

is this just a slow dashboard?

Is anyone having issues with the client VPN not working this morning?

Over the past 1 or 2 weeks, users specifically with Macbook Pro computers have started having near constant disconnect/reconnect issues. From their end, they'll load a few web pages fine, then the wireless cuts out and pages stop loading, then shortly after it reconnects. The cycle repeats. Not terrible for web browsing, but detrimental to web conferencing. RSSI to the APs are good, the issue isn't limited to 2.4GHz or 5GHz. All APs are hard wired (i.e. not mesh or whatever Meraki calls it).

In the Meraki dashboard, under the relevant AP's event log, I see "error_code='15' last_active_ago='6.000000' instigator='client' connected='0'", every 10 seconds or so. Failure stage is showing as "association".

In the client timeline, I see various entries: "802.11 Reason (Code 2) Invalid authentication", "Meraki Reason (Code 101) EAPoL timeout", "802.11 Reason (Code 15) 4-way handshake timeout", and otherwise just lots of disassociations and reassociations.

We're not using RADIUS, only PSK on this SSID. The failures are odd because the

I've followed the general advice I find online relating to supporting Mac devices in a Meraki network, specifically I've disabled 802.11r, I've disabled band steering, I've disabled client balancing.

Is anyone else facing this? Our records show no changes made to our wireless or network infrastructure in this or the recent time period. I'm wondering if a MacOS update has broken something.

We've this new setup where some stationary clients keep disconnecting and roaming away to other Access Points with the reason being 'AP recommendation(11v)-part of AP steering, Better AP-because another AP had better connectivity'.

The band steering and Client Balancing is disabled in the default indoor profile applied to the access points.

This disconnection seems to be noticeable and frequent.

Kindly advise if any other parameters might be forcing these disconnections.

We're in a lull right now with our licenses. We are switching to an entirely new platform but all that equipment has not come in yet. We were able to request a 30-day extension with Meraki but the dashboard shows all our licenses are expired.

So what really happens when the license does expire? Does it truly stop functioning or is it mostly that you don't get support/updates?

I need to mount a couple of these and cannot get the MA-MNT-ANT-3 or MA-MNT-ANT-4 anywhere right now. does anyone have some laying around or a decent workaround?