New articles:
Access Manager - Architecture And Example Use Cases
Access Manager Configuration Guides
Securing Managed Endpoints - EAP-TLS with Entra ID Lookup
Securing Managed Endpoints - Username/Password Authentication against Entra ID
Securing non 802.1X Supported IoT or Other Endpoints - MAC Authentication Bypass (MAB)
Change: New articles.
Change: New article.
Change: New articles.
Measure Wireless Throughput Using iPerf
Change: New article.
Gathering DM Logs for Troubleshooting Cellular Issues
Change: New article.
Secure Connect:
Cisco Secure Connect - Account Setup Troubleshooting
Change: Added "All sites enrolled in Secure Connect must be detached via the Secure Connect > Sites page before unlinking the current Umbrella org. Also, please verify that dashboard has deleted all Secure Connect Hub networks after the branch sites were detached."
MX:
WAN Behavior on MX75/85/95/105
Change: Added "MX85/95/105 supports PoE+ on GbE Port 4. PoE on this port can be disabled from the Local Status Page if the MX is running firmware MX18.211.4 and above."
Change: Added "If your MX device is operating on firmware version MX19.1.4 or later, you have the option to establish both Primary and Secondary VPN tunnels to enhance redundancy. For more information see Primary and Secondary IPsec VPN tunnels."
Change: Added descriptions for the "Monitoring Workflow Diagram".
Meraki MX ThousandEyes Configuration Guide
Change: Updated Subscription Licensing Essentials tier: "Same features as Advanced Security licensing".
Meraki MX/Z Security and SD-WAN Licensing
Change: Added "The Z4 enterprise and Z4 teleworker licenses cannot be mixed on the same org."
Change: Added "For Fixed IP assignments, client description can only contain letters, numbers, spaces, and simple punctuation (commas not supported)."
MS:
Migration from CLI-managed Catalyst Switches to Meraki-managed Mode
Change: Added "If an RMA is done for a migrated Cisco Catalyst 9300 switch, the replacement will come in the management mode for which the unit was originally purchased."
Meraki MS Group Policy Access Control Lists
Change: Added "In order to use group policy on MS390 or C9300 series switches, it is required to use Custom network firewall & shaping rules."
Change: Added section "Dashboard Service Rules".
Change: Added "Traffic is first evaluated against Dashboard Service Rules, and followed by user-defined rules if no match is found."
Configuring Spanning Tree on Meraki Switches (MS)
Change: Added "C9K".
MS Switch Access Policies (802.1X)
Change: Updated RADIUS Testing behavior: "RADIUS test messages are sent every 24 hours. If a RADIUS test fails for a given node it will be tested again every hour until a passing result occurs. A subsequent pass will mark the server reachable and clear the alert, returning to the 24 hour testing cycle."
MS Layer 3 Switching and Routing
Change: Added "SVI MTU size is 1500".
MR:
Change: Added "Note: AI-RRM is currently in early access preview stage and opening up more global regions in phases. During this period, there will be no licensing enforcement (free trial for all organizations). when AI-RRM moves to general availability, AI-RRM will be offered as premium service for MR-ADV or Advantage tier subscription customers. Customer can participate in a free trial by opting-in to AI-RRM from Early Access page (Organization > Early Access)."
Change: Added "Spectrogram and waterfall graphs are no longer available on these redesigned pages, but continue to be available through the View Old Version link available beneath the AP Neighbors by RSSI graph."
Change: Added "Client Isolation also extends to Port Profiles that can be leveraged on Access Points such as the MR30H, MR52, MR53 and MR84."; added section "31.1.6 and later".
Seamless Meraki Integration with Cisco Spaces
Change: Added FAQ "Is it possible for more than 1 Meraki Organization be integrated to the same Cisco Spaces account?"; added FAQ "How does the integration handle license provisioning if my Org is using subscription licensing instead of co-term?"
Using the Cisco Meraki Device Local Status Page
Change: Added "Note: The local status page of an MR device can be accessed via its LAN IP only if remote access to the local status page is enabled on the Network-wide > Configure > General page. If it is disabled, access to the local status page of an MR is only possible by connecting to an SSID being broadcasted by that MR device."
SM:
How Systems Manager Approximates the Location of a Managed Device
Change: Added "Note: Windows devices require MDM Profile enrollment to utilize AP based location."
Endpoint Management Enrollment
Change: Added "SM Sentry Enrollment does not currently support tvOS".
MV:
Meraki Vision Portal Changelog
Change: Added release notes for up to v1.23.11.
Change: Added FAQ "What happens when a camera moves from one supported Cloud Archive duration to a different one?"; added "Any footage that has been backed up will be retained until the end of the retention period. Footage will be deleted in the order in which it was recorded. For example, if the cloud archive footage retention period is 90 days, any footage older than 90 days will be deleted. The MV devices have onboard storage for up to 60 days (depending on the retention settings) and any footage that is stored on the devices can be backed up to the Cloud if new Cloud Archive licensing is purchased and assigned to the device."
General Administration:
FIPS 140 Devices and Firmware for Cisco Meraki
Change: Added IOS-XE 17.15+.
Meraki End-of-Life (EOL) Products and Dates
Change: Added MS390-48UX2-HW, MR56 and MS120-8FP-HW.
Small-Form Factor Pluggable (SFP) and Stacking Accessories
Change: Added "***Note: The number of Network Module ports are limited when C9300X-NM-8Y are used with the C9300X-48HXN models. Only 6 of the 8 ports will be available on a C9300X-48HXN switch."
Change: Added "After an organization is deleted, users may not be able to log in for 15-20 minutes. Clearing browser cache and cookies may be needed to allow users to log in."
License Info Page - Co-Termination License Model
Change: Added "The SKUs will be shown if the organization is out of compliance or 30 days from the Co-Termination date."
Meraki Device Reporting - Syslog, SNMP, and API
Change: Updated behavior of IP restrictions when using SNMPv2: "IP restrictions must be configured to restrict SNMP access to particular IP addresses in the customer environment when using v2c."
Organization Split Overview and FAQ
Change: Added "SAML users with read-write permissions may request an organiztion split, as well."
Change: Added "Source IPs, are the source IP addresses from which the API requests originated."; added "API Analytics page FAQs".
Change: Added "Vision Portal" to "Login IP ranges".
Change: Added section "Licensing Requirements"; added "MR Advanced license is required to use the Proactive PCAP feature. See Licensing Requirements for more information."
Information for Cisco Meraki for Government users
Change: Added CW9166D1, CW9163E, CW9172I and MS150.
Co-Term License Problem - Out of Compliance
Change: Added "When an organization is out of compliance, you may see a splash page with "This network is misconfigured.'"
