Secure SD-WAN Plus License Mix with WiFi/Switching License

johnnyngena
Getting noticed

Secure SD-WAN Plus License Mix with WiFi/Switching License

Friends, I'm placing MS switches and MR AP's at the spokes of an MX based SD-WAN network.  If I provision the MX's with Secure SD-WAN licenses, would it be an issue if the MS/MR's have Enterprise or Advanced licenses?

 

Thank you.  

6 REPLIES 6
Bruce
Kind of a big deal

@johnnyngena The licenses on the MX bares no relevance to the MS/MR licenses. You can have the SD-WAN Plus license on the MX and the MS/MR can be Enterprise licenses. The MXs, however, do all need to have the same license, i.e. SD-WAN Plus if that's your chosen license.

 

Check the features of the licenses and make sure you are purchasing the most cost effective licenses for what you are trying to achieve. You can see the features here, https://documentation.meraki.com/General_Administration/Licensing/Meraki_MX_Security_and_SD-WAN_Lice....

Thank you Bruce.  Do the MS/MR need to have the same license for the whole network or is it based on a per closet basis, where the MR connected to that particular switch stack will have the same license type? 

Bruce
Kind of a big deal

The MR Advanced license provides for predefined Cisco Umbrella settings that can be applied and also for Adaptive Policy support. The MS Advanced license just provides Adaptive Policy support. You need to have all the devices in a network have the same license for these features to work. Also, with the MR if you apply Advanced licensing you have to use the per device licensing model. The MR and MS don’t need to have the same license - e.g. if you want the predefined Cisco Umbrella settings then you can do the advanced license just on the MR. Note that the only MS supporting Advanced Licensing is the MS390, and it currently has a lot to be desired in firmware stability and feature support.

Bruce, thanks again.  Great answer.  So, on the MR's, does this mean that to provide Umbrella function, they require Advanced licenses?

Bruce
Kind of a big deal

@johnnyngena No, if you've a separate Cisco Umbrella subscription purchased with the Cisco Umbrella SKUs then you can integrate your Umbrella Dashboard with your Meraki Dashboard using API keys, see here https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Manually_Integrating_....

 

If you purchase the MR Advanced license you get four pre-defined (non-customisable) Cisco Umbrella profiles that you can apply to wireless SSIDs. These are predefined and you don't get access to the full Cisco Umbrella Dashboard/product, but it can be useful for some instances - e.g. another malware protection layer, or basic protection and filtering of guest user traffic. See towards the bottom of this page for the pre-defined policies, https://documentation.meraki.com/MR/Other_Topics/Cisco_Meraki_and_Umbrella_Integration_-_MR_Advanced...

Excellent Bruce.  Thank you so much for the support!

Get notified when there are additional replies to this discussion.
Welcome to the Meraki Community!
To start contributing, simply sign in with your Cisco account. If you don't yet have a Cisco account, you can sign up.
Labels