- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Documentation Digest: November 11th-November 14th
New articles:
Change: New articles.
Change: New article.
Primary and Secondary IPsec VPN Tunnels
Change: New article.
Selecting a Management Mode for Unified Licenses - WIFI7
Change: New article.
Secure Connect:
Cisco Secure Connect - Client-based ZTNA
Change: Added "Device Posture - Duo Desktop" to section "Prerequisites & Requirement".
Cisco Secure Connect - Manage DNS Policies
Change: Added "DNS Security is a great solution for protecting guest networks as it doesn't require decryption or an endpoint agent."
Cisco Secure Connect - Manage Web Policies
Change: Added "Users and groups must be synced into Umbrella to be used in policies. For details on setting up identity and syncing users, check out identity documentation."
Cisco Secure Connect - Cloud Access Security Broker (CASB)
Change: Added "Threats can come from the outside or from insecure SaaS usage. Shadow IT, or the usage of applications unapproved or monitored for business usage can lead to data exposure and leakage."
Cisco Secure Connect - Internet Access Policies
Change: Added third item to the list of benefits.
Cisco Secure Connect - Defining Private Resources & Apps
Change: Added "Wildcard FQDNs are supported with the following format: *.cisco.com"; added "ICMP is not supported for ZTNA but is supported for VPN Access".
MG:
MG41/41E Technical Specifications
Change: Added Spark (NZ) to the list of certified carriers.
MX:
Change: Added "Custom traffic shaping rules may be configured on a per-destination basis. Source based configurations are not supported at this time."
IPv6 Support on MX Security & SD-WAN Platforms - VPN
Change: Added "IPv6 is not currently supported for IPSEC Client VPN. Refer to IPv6 Support on MX Security & SD-WAN Platforms for more information on supported IPv6 features on the MX Security Appliance."
MS:
MS Switch Access Policies (802.1X)
Change: Renamed "Increase Access Speed" to "Concurrent Authentication".
Change: Updated section "Layer 3 SVI Behavior".
MR:
Change: Added "Enabling AP neighbors changes the RF Spectrum page."
Change: Added "When you have APs using port profiles, and all the ports in the profile are disabled, the AP will reset its radios every 20 minutes if it doesn't have communication with the Meraki cloud (when it is offline)."
MV:
Change: Added "Cloud Archive footage retention is determined by time duration rather than storage capacity. For example, a 7-day Cloud Archive license retains footage for a continuous period of seven days from the current date, rather than storing a cumulative seven days' worth of footage."
Change: Added "Digital Pan-Tilt-Zoom (DPTZ) mode for live & historical video".
General Administration:
Creating and Applying Group Policies
Change: Added "Since the policy is applied on a per-VLAN basis, clients affected by this configuration will not contribute to the 'Affecting' counter for that policy displayed under Network-wide > Configure > Group policies page." to section "By VLAN".
Change: Updated the behavior of PUT: "PUT is idempotent; it updates a resource, but does not create a resource if it does not already exist, which differs from RFC 9110.
Root Cause Analysis (RCA) - Alert Based Workflows
Change: Added "Cyclic Redundancy Check (CRC) errors detected" and "Guided Troubleshooting Flow".
Subscription - Licensing Claim Cloud
Change: Added "Only Cisco Networking Subscription can be used in Meraki Dashboard and Cisco Smart Software Manager."
Subscription - Licensing Changes Cloud Managed
Subscription - Licensing Claim Cloud
Subscription - Licensing Renewals
Change: Added "Cisco Networking Subscription does not have subscription changes available at this time."
Subscription - License Compliance Cloud Experience
Change: Added "This document applies to Term Subscription and EA's with the Networking, Camera Systems, and System Manager Suites. It does not cover legacy EA suites."
Change: Added "Unified Licensing WIFI7".
Subscription - Licensing Overview
Change: Added note "For customers ordering WIFI7 in regions where Subscriptions is not available yet, you have the option of ordering term licensing in our legacy licensing models."
Change: Added MT15-HW.
Change: Added CW9166D1-MR.
Change: Added MG52-HW and MG52E-HW.
Change: Added C9200 and C9200L.
- Labels:
-
Documentation digest
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Primary and Secondary IPsec VPN Tunnels
@Hannah-C There are multiple instances on this article where it says a feature or setting will be available "once version 19 hits GA":
Health check status is currently logged in the event log. An event type category is not yet available for health check logs, a category will be available before 19.x goes GA.
Tunnel monitoring probes are sourced from 192.0.2.3/32 by default for both primary and secondary tunnels. The Probe IP cannot be configured via Dashboard at this time. The ability to customize your probe IP via Dashboard will be available when the 19.x firmware becomes GA.
When does Meraki consider v19 GA, I would have thought it being in the Stable release candidate channel as GA, because it is no longer beta? Unless the wording should be changed to read "When 19.x firmware is promoted to the Stable channel"..
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
