New MX 19.1.7.1 other release: fixes issue with many clients.

[cmr]

Security appliance firmware versions MX 19.1.7.1 changelog

Important notice

• As of MX 19.1, Cisco Meraki will no longer support USB-based Cellular Failover on the MX and Z platforms.

Legacy products notice

• When configured for this version, Z1 devices will run MX 14.56.
• When configured for this version, MX400 and MX600 devices will run MX 16.16.9.
• When configured for this version, MX64(W), MX65(W), MX84, MX100, and vMX100 devices will run MX 18.107.12.

Bug fixes - limited platform fixes

• Fixed an MX 19.1.7 regression that could result in MX75, MX85, MX95, MX105, MX250, and MX450 appliances servicing many clients to experience intermittent periods of heightened packet drops and latency. This resolves known issue MX-36338.

Known issues status

• This list is being reviewed and updated.

Known issues

• During the upgrade process, MX appliances upgrading from version prior to MX 19 may experience a failure to properly classify traffic. This issue will be resolved once the appliance has completed the upgrade to MX 19. (MX-36307)
• Due to an issue under investigation, MX appliances may incorrectly route traffic destined to subnets learned through eBGP over a Non-Meraki VPN connection. (MX-34803)
• Duplicate retrospective “malware download detected” emails may be erroneously sent. (MX-30111)
• Due to an issue under investigation, making certain configuration changes to WAN interfaces (such as disabling or enabling an interface) can cause the IDPS process to fail. This issue may also cause high device utilization. The issue can be worked around by rebooting the MX appliance or disabling and then re-enabling IDPS. (MX-34504)
• Due to an MX 19.1.5 regression, Z4(C) appliances may fail to provide PoE power to connected devices. (MX-34938)
• Due to an MX 19.1 regression, traffic will fail to route over AutoVPN when the only active uplink is a cellular connection. (MX-35703)
• Due to an issue under investigation, MX75, MX85, MX95, MX105, MX250, and MX450 appliances may experience an unexpected device reboot when VPN NAT is configured. (MX-36180)
• When failover is configured between non-Meraki VPN tunnels, the Route Table page on Dashboard may incorrectly show the route for the primary VPN tunnel is inactive. (MX-36316)
• During the upgrade process, MX appliances upgrading from versions prior to MX 19 will experience a failure to connect to non-Meraki VPN peers if any VPN peer names contain a space. This issue will be resolved once the appliance has completed the upgrade to MX 19. (MX-36312)

[RaphaelL]

Known issues - february 18th update

• Duplicate retrospective “malware download detected” emails may be erroneously sent. (MX-30111)
• Due to an issue under investigation, MX75, MX85, MX95, MX105, MX250, and MX450 appliances can fail to establish iBGP sessions when the subnet associated with the highest-numbered VLAN participating in the site-to-site VPN has a 1:M VPN NAT rule configured. (MX-36231)

[Chad_CSB]

"Due to an MX 19.1 regression, traffic will fail to route over AutoVPN when the only active uplink is a cellular connection. (MX-35703)"

Any update on this? Effectively makes the built-in cell failover of MX67/68's worthless.

[RaphaelL]

Cellular has been a big mess since 18.107 so , no surprises here.

[Chad_CSB]

We were sold Cisco XDR on the promised integration with Meraki, requiring 19.1.7 FW or later. They failed to mention it required BETA firmware of Meraki. Fairly infuriating to be honest. 

we are on latest 18 release currently and our cellular is working great so far. Tested stable release candidate and it instantly broke. Reverted and still working.

[shvlzz]

Not sure if this issue I've experienced is directly related to this RC, but..

Our MX68CW WAN connection configured for DHCP returns FAILED status even though it picks up correct DHCP config and switchport status on the uplink switch correctly shows A-FULL/A-1000. Multiple reboots does not bring the connect online.

I had to rollback firmware to 18.211.5.2 and the issue resolved after rollback + one additional reboot.

Luckily there is cellular backup at this site (in Darwin, 4 hour flight from Sydney Australia) which provided Meraki Dashboard access (even though the AutoVPN does not work with the cellular backup as everyone is aware).