Home > Security and SD-WAN > Monitoring and Reporting > Client Tracking Options

Client Tracking Options

There are three different ways for Meraki devices to identify clients: Cloud Track, Track by MAC, and Track by IP. These tracking methods are how key information like the clients list and network usage data is populated in the dashboard.

This article outlines how to change client tracking in the dashboard, the differences between the three options, and the best use cases for each in different topologies.

Note: Only the MX Security Appliance has the option to use Cloud Track or track clients by IP. All other Cisco Meraki devices will only distinguish clients based on MAC addresses.

Configuring Client Tracking 

The following instructions outline how to change the client tracking method:

  1. In the dashboard, navigate to Security & SD-WAN > Configure > Addressing & VLANs.
  2. Under Deployment Settings, change Client tracking to the desired option:

client tracking options

 

  1. Click Save Changes at the bottom of the page.

Changing the client tracking method will reset your historical client usage statistics. 

Client Tracking Option Use Cases

The best tracking method to use depends on whether any layer 3 devices are routing between the security appliance and your end clients, which introduces multiple broadcast domains. The recommendations are detailed below. 

 

Is there a L3 device routing between MX-Z and end clients?

Recommended Tracking Option

None, or L2-only switches

Track by MAC

Meraki MS switches with L3 enabled

Cloud Track

Non-Meraki L3 switches/routers

Track by IP

Combination of Non-Meraki and Meraki switches with L3

Track by IP

Cloud Track

Cloud Track is a Meraki technology that leverages network topology and device information to uniquely identify and track clients. It uses an algorithm that intelligently correlates client MAC and IP addresses seen across the Meraki stack, allowing the security appliance to generate a unique identifier for each client in a combined network with other Meraki devices. This is specifically useful when there are Meraki MS switches routing layer 3 between end clients and the security appliance, which segregates broadcast traffic containing the client's MAC address.

This method should be used only if the network has downstream layer 3 routing devices that are all Meraki devices. In this deployment scenario, tracking by IP would otherwise require the security appliance to be split into a separate dashboard network, as tracking by IP is not supported in combined networks. Tracking by MAC would fail to identify end client devices due to the layer 3 boundary, associating downstream client traffic to the routing switch and negatively affecting network usage numbers in dashboard.

Note: Cloud Track does not allow the MX to identify clients connected to an SSID utilizing NAT mode with Meraki DHCP, even for MRs in the same dashboard network.

 

Requirements and Conditions

Please review the requirements and conditions below before enabling this feature on your network.

To see the Cloud Track option in Addressing & VLANs, the following conditions must be met: 

  • There must be a security appliance with at least one Meraki L3 switch in the same network in the dashboard. To avoid incorrect tracking data, the devices in this dashboard network should also be in the same physical network.
  • This option is only shown if the MX firmware version is 9+ and the MS firmware version is 10+.
  • Do not use Cloud Track in a dashboard network where the MX's WAN ports are connected to a Meraki switch in the same Dashboard network. If you need to use a Meraki switch in between your ISP and the MX WAN please separate this switch from both the dashboard and physical network.

Note: If you are currently tracking by IP, you will need to temporarily change it to track by MAC in order to combine the network. Once the network is combined, you should see the option for the ‘Cloud Track’ under ‘Addressing and VLANs’ on your MX. 

 

2.png

 

Changing the client tracking method will reset your client usage statistics. 

Note that switching from Cloud Track to Track by IP or Track by MAC may take up to 30 days for client tracking information to update on active devices, which may result in duplicate entries with different client details. Switching from Track by IP or Track by MAC to Cloud Track should update within 24 hours for active devices. Inactive devices may take up to 30 days to age out for all tracking options.

Track by MAC 

In many deployments, the MX security appliance is used as the gateway for the network and performs inter-VLAN routing for the network if necessary. In this circumstance, the MX is in the same broadcast domain as all clients in the network, so the client's MAC address will be found in all traffic seen by the MX.

The following diagram outlines how the MX can see client MAC addresses in this topology:

 

6.png

 

Track by IP 

Note: Track by IP is not supported in combined dashboard networks. To combine an MX network that is tracking clients by IP, switch it first to track by MAC address or Cloud Track before proceeding.

This option is best used in the two case scenarios:

First is in split networks, where all layer three devices are Meraki devices but they are in separate dashboard networks.

Second, in cases where there is a non-Meraki layer 3 switch performing inter-VLAN routing downstream of the MX. If you are using Meraki layer 3 switches, enable Cloud Track instead. Since non-Meraki layer 3 devices will modify the source MAC address of client traffic, the MX cannot identify clients by their MAC as shown below.

 

7.png

 

In order to identify clients downstream of the non-Meraki layer 3 switch, the MX can be changed to track clients by their IP. Since the non-Meraki layer 3 switch won't be modifying the source IP of client traffic, the MX can identify different clients by IP:

 

8.png

 

When an MX is set to track clients by IP, the client MAC addresses displayed on the clients list may not be accurate.

Last modified

Tags

Classifications

This page has no classifications.

Explore the Product

Click to Learn More

Article ID

ID: 8911

Explore Meraki

You can find out more about Cisco Meraki on our main site, including information on products, contacting sales and finding a vendor.

Explore Meraki

Contact Support

Most questions can be answered by reviewing our documentation, but if you need more help, Cisco Meraki Support is ready to work with you.

Open a Case

Ask the Community

In the Meraki Community, you can keep track of the latest announcements, find answers provided by fellow Meraki users and ask questions of your own.

Visit the Community