Handling SGT on MX from LAN to LAN

[Vahid-Farahani]

Dear community,

Does anybody know that Meraki MX will handle traffic with SGT tags (Cisco MetaData) without enabling Adaptive Policy on it ? the current version is 17.10. 

I know that MX version 18.1 only supports preserving and propagating SGTs over autoVPN on NAT mode MXs, I need that MX handle traffic with SGT tag from LAN to LAN. 

Thanks and greetings,

Vahid

[alemabrahao]

Have you tried with this doc?

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Adaptive_Policy/Adapt...

[Vahid-Farahani]

Thanks for your relpy.

Yeah, I have read this doc, it has been mentioned that: 

"MX version 18.1 only supports preserving and propagating SGTs over autoVPN on NAT mode MXs."

In my network the Meraki is between two Cisco devices.

[KarstenI]

Most important question here: Do you have LAN-switches that can handle SGTs? In the Meraki world this is only the MS390. On the Catalyst line it's 3650+ or the 9k line.

[Vahid-Farahani]

Yes LAN switch is handling the SGTs, 

FYI: The traffic is coming to the Meraki with CMD, but not forwarded with Meraki to down stream switch. 

If I upgrade the apliance to the 18.1+ , do you think that it will handle the traffic? 

Without SGT tag, everything is working. 

[PhilipDAth]

I think you will need to use a super new firmware to stand a chance of this working.

I would kinda expect this to require an "SD-WAN Plus" licence for this to work ... I wouldn't expect Meraki to support this without that licence.  I am only guessing at this bit.

Could you not plug the two Cisco switches directly into each other and side step the issue?