New articles:
Change: New article.
Secure Connect:
Cisco Secure Connect - DNS Troubleshooting
Change: Added sections "Remote user cannot resolve internal DNS", "External DNS is not Resolving", "DNS Policy not Enforced", "Web Browser Reports Generic Error" and "DNS Policy Tester".
Cisco Secure Connect -Troubleshooting Remote Access
Change: Added "Posture Failure", "Unable to request IP", "Umbrella is inactive" and "Remote user not able to access local application".
Cisco Secure Connect Foundation Meraki SD-WAN Integration
Change: General article re-write.
Cisco Secure Connect Data Center List
Change: Secure Connect Complete available in RIO1 and SAO1.
Cloud Monitoring for Catalyst:
Cloud Monitoring for Catalyst Wireless Requirements
Change: Added section "Supported Dashboard Clusters".
MX:
Change: Added "If the peer device is part of a high availability peer (HA), you will need to enter the HA's virtual IP."
WAN behavior on MX75/85/95/105
Change: Added "On MX 18.2+ firmware, a third wired uplink can be enabled with the MultiWAN feature. When MutliWAN is enabled, the WAN behavior on MX75/85/95/105 platforms is different from what is outlined in this article. To learn more about MultiWAN, please see MultiWAN Backup Uplink."
3G/4G Cellular Failover with USB Modems
Change: Added "Additionally, upon first connection to the Meraki dashboard, MX devices should not be connected to USB modems / internal SIMs at all. This is because the cellular service will restart constantly if a connection cannot be established, leading to MX instability which will prevent the initial firmware upgrade from completing successfully."
Change: Added MX67C and MX67W to the description for MA-PWR-30WAC.
Change: Updated "Max throughput with all advanced security features" for MX85.
Change: Added "Changing the client tracking method from MAC-based to either IP or Unique Client Identifier will cause Group Policies to not work. Additionally, changing the tracking method will also reset your historical client usage statistics."
MS:
Change: Added "Module" Search Type in "Searching for ports".
MS Switch Access Policies (802.1X)
Change: Added "Critical Authentication VLAN is only supported in the Single Host, Multi Host, Multi Domain, and Multi Auth modes for Cloud Manager Catalyst switches running CS17 and higher. Critical Authentication VLAN is only supported in Single Host, Mult Host and Multi Domain on MS Classic Switches."
MR:
Meraki Health - MR Access Point Details
Change: Added "While both the AP performance tab and the wireless health tab both pull information from the same sources over the same time span, the performance tab is not able to capture variations in the overall volume of packets processed, which may lead to inconsistencies seen between the two tabs."
Change: Added "The T-Rail Channel Adapter Mount Kit (SKU: MA-MNT-CLG-1) can be purchased separately for mounting Access Points."
MR Hospitality Design Guide (CVD)
Change: Updated MR models; added reference to free online training courses on the Meraki Learning Hub.
OpenRoaming integration with Cisco Spaces
Change: Added "Some clients might refuse to connect to SSIDs using OpenRoaming when configured with weak encryption methods (e.g., WPA1 or 'WPA1 and WPA2'). Please ensure the SSIDs are configured with strong encryption, such as 'WPA2 Only' or 'WPA3', under Wireless > Configure > Access Control, in the 'WPA encryption' section."
Automatically Integrating Cisco Umbrella with Meraki Networks
Change: Added "If Automatic Umbrella is explicitly provisioned, using Manual integration with Umbrella in such organizations will not be possible. This process is irreversible."
Change: Added "RADSec Keep Alives is introduced in MR 30.7. Ensure networks are configured for MR 30.7+ for support."
SM:
Apple Volume Purchase Program (VPP)
Change: Added sections "Apple Books (iBooks) App License", "Location Based VPP in Apple School Manager & Apple Business Manager", "Troubleshooting VPP Installs" and "Removing App licenses".
Uninstalling Systems Manager and Removing Managed Devices
Change: Added "If VPP apps are in use, remove VPP licenses from devices before removing the device from the network."
Cellular Data Management with Systems Manager
Change: Added "The usage reported by SM is best effort. Dashboard may under report or over report data usage in comparison to service provider statements. Consult your service providers data usage for the most accurate data. On iOS devices, the Systems Manager app needs to be running in the background to update Dashboard and report the latest cell data usage."
Enrolling and Supervising iOS Devices using Apple Configurator 2.5 or Later
Change: Added note regarding an “invalid profile” error during manual device enrollment (invalid enrollment authentication method).
MV:
Meraki Vision Portal Changelog
Change: Added release notes for up to v1.20.2.
General Administration:
Active Directory Issue Resolution Guide
Change: Added "If the Server IP address is located over a VPN Tunnel, communication from the WAN appliance with the server will originate from the highest numbered VLAN included in the VPN."
Using the Cisco Meraki Device Local Status Page
Change: Updated the behavior of default credentials: "MX devices running MX 19+ firmware, MS devices running MS 17+ firmware and MS390/Catalyst devices running CS 17+ firmware will use the username admin and the password will be the serial number of the device (upper case letters and dashes). All devices running other firmware versions will use the serial number of the device (upper case letters and dashes) as the username with no password."
Small-Form Factor Pluggable (SFP) and Stacking Accessories
Change: Added "All MSes, except MS130R and Catalyst. Not supported by MS390 / C9300/X/L." to MA-SFP-1GB-TX; added note about "Other non-M accessories" (like fan spares, power stacking cables, stackwise cables and power supplies).
Change: Added "The VLAN pool contains multiple VLAN IDs. If a specific VLAN experiences a client connection issue, such as repeated DHCP failures for a single client, it may be temporarily blocked before being reassigned."
Meraki Per-Device Licensing Overview
Meraki Per-Device Licensing - Configuration
Change: Added "Per-device licensing is no longer available for customers who would like to move to this licensing model for regions where Subscription Licensing is available."
Meraki SM Subscription Licensing
Change: Added "Agent version 3.5.2+ is required to enroll new Windows and macOS devices into a Systems Manager network when subscription licensing is enabled. For more information about the Agent, including how to set the preferred agent version for enrolled devices check out this Documentation article."
Change: Added base URLs for the India and Government dashboard.
Creating and Applying Group Policies
Change: Added "Cisco Meraki recommends as a best practice to create no more than 100 group policies per network."
Change: Added "MS130X / MS130R".
Change: Added section "Intelligent Capture".
