Assistance Required: Offline Meraki Switches and Access Points Bound to Template A

[SD-WAN1]

Dear All, 

I am currently managing approximately 60 networks bound to the same configuration template (Template A). Recently, I observed that in networks with Meraki firewalls, switches, and access points, the switches and access points are offline.

I have already compared the firewall rules and group policies of Template A with another template (Template B) where no such issue exists. However, the root cause remains unclear.

Packet captures indicate that traffic is being transmitted between the Meraki firewall and the respective switches and access points, but DNS configuration does not appear to be successful.

Could you please advise on the necessary steps or configurations to resolve this issue?

Looking forward to your guidance.

[ConnorL]

If you haven't already, please contact Support , they'll be able to assist you with troubleshooting and determining the root cause.

Without a lot of context about your network topology and configuration, it isn't easy to give you a starting point or troubleshooting steps on a public forum. 

[TyShawn]

If you connected a laptop or PC to the management network do you get proper IP / Gateway / and DNS serves? Next, I would see if that device could reach the Meraki DB with those settings. You could also try setting one device's DNS to 1.1.1.1 or 8.8.8.8 factory reset it and see what happens. Also, are you blocking or limiting this traffic in any way, like destination rules or limiting DNS access?

[PhilipDAth]

Even if DNS is failing, it should still check into the dashboard but in a warning state.

Go to "Firewall Info" in the dashboard, and make sure you are allowing the outbound traffic that is required.

Thinking about this further - you have MXs reporting they are offline, but they are actually working?  Do they have Internet circuits plugged into them directly, or something else (like MPLS)?

[SD-WAN1]

Hi Philip,

Thank you for your response.

Yes physically they are working. Clients are connected to both Merkai switch and access point, clients able to access internet