Tried to remove the NAT config, save, and reapply. Did not work 😕   So Im waiting in the phone support queue ....   ... View more

You'll need to physically gain access to the device. ... View more

Thanks for the info @Bruce .  That is a good feature additional to MS14. ... View more

I was really hoping that Meraki would've had ready templates to make this simple for me but it definitely appears to be a step in the right direction - thanks Inderdeep! ... View more

@MarcAEC i got a quick response from MaxMind, within a couple of hours that the issue should be fixed in their database "next Tuesday" hopefully that means tomorrow. thanks again for your help!     Dear Requester, We have reviewed and accepted your correction for IP range https://protect-us.mimecast.com/s/LNsiCKrG6YS7NBXuMnKkV?domain=192.124.249.0. The corrected data should appear in next Tuesday’s update. We will not send additional confirmation emails for separate corrections (you have submitted) that are accepted within the next 24 hours. You may check whether your correction was applied via our database or web service online demos: GeoIP2 City Database Demo GeoIP2 City Precision Web Service Demo If you have any questions please contact us at correction@maxmind.com. Sincerely, The Team at MaxMind ... View more

Then let us parse it to syslog, anything. ... View more

Yes we have also noticed higher CPU and lower VPN throughput as a result of this issue. There is a note in 16.4 which states "Significant performance regressions for VPN traffic may be observed on MX84 and MX100 appliances" and I suspect this is present prior to this release. ... View more

Uhhhh nice, didnt know you could get support to do that. But that would fix his problem, absolutely 🙂 ... View more

@thomasthomsen, I agree with you, the documentation on using the MX as a wireless concentrator isn’t great, but as @ww stated it’s ‘yes’ to both your questions. ... View more

We use Sophos XGs for our enterprise edge and client VPN, it has an SSL version based on openVPN and an IPSEC version.  There are a couple of dedicated clients (one SSL only, the other for both) and it supports a mix of full tunnel and split tunnel with multiple profiles, 2FA and pretty much any OS including IOS devices, Raspberry PIs and many more.  However their SD-WAN solution isn't a patch on Meraki's! ... View more

So ... I'll just mark my own answer as the solution ... *DOH* ... View more

Ok -.... here's a hint to our problem - Content filtering - When the MX cant reach Brightcloud services (that is not described as required on the "firewall info" page).   I'll just leave this here, and then people can PM me if they want to know what I think about this, the strange way the MX apparently handle this, what you can see in the event log (on any log for that matter) *hint:Its nothing*, and what I think of Merakis support right now. ... View more

Apparently the CDP/LLDP issue with the MX250 and MX450 to them is a cosmetic issue and doesn’t have any real world impact, and won’t be worked on,  that’s just a great answer for a solution I spent a good amount of money.  Never again will I recommend a Meraki solution to a customer. ... View more

We have had a similar issue with a couple of misconfigured sites.  Turned out to be the mtu setting on the path to the site from radius.  The isp’s kit was configured to a figure below 1473. The first packet would be returned by the radius server but the remaining packets of 1500 size would fail. A quick check is a mtupath tool.  Next time it’s happening try this from either end to confirm if this could be the cause. ... View more

Finally!!!!   Absolutely amazing to have the MX100 replaced ... View more

Just to confirm:   at FCS it's definitely x2 active WAN uplinks, as other models, but you now have media flexibility.   I have requested that the datasheets be amended to bring clarity in this. ... View more

Well there is no upstream firewall. And if there was, should the Meraki dashboard then not tell me that there is something missing. Its just strange. ... View more

I think I'll just go "sniff" some packets 🙂 Then I'll know 🙂 ... View more

Found the problem (I think): Windows update : https://support.microsoft.com/en-us/topic/may-11-2021-kb5003173-os-builds-19041-985-19042-985-and-19043-985-2824ace2-eabe-4c3c-8a49-06e249f52527   Under "known issues":  "System and user certificates might be lost when updating a device from Windows 10, version 1809 or later to a later version of Windows 10."   That's most like the issue.   ... View more

But most customer would rather like it just to be there in the UI. I mean, all the data is there in the dashboard, its just an UI change. I really wish they would fix that (yes I call it a fix, because the current solution with only 30 lines is not good).   ... View more

Would just like to "bump" this. Because its really annoying for some customers, who do not have API knowledge, that they cannot just download "all" , or for a given time, only the 30 lines. I mean, all the data is there, its just an UI change that should be fairly easy for Meraki to do. So its kind of crappy atm. I wish .... I guess....  ... View more

Or here is another idea. Use "Insight" to automatically select the best WAN connection for a specific service at that specific time. That would be a "flipping awesome" feature, and would sell some more "Insight" licenses Im sure 🙂 ... View more

Yeah, sorry we cant do that in this network at the moment. Because its already also running a IpSec to Azure (that works just fine 🙂 ).   And lets say that worked, what should we do then ? I dont really see a workaround 😕, but perhaps Im missing something.   I have tried some packet capture, to see if I could troubleshoot the problem , but all I see is the 6 initial packets back and forth, and then just an information packet. Then it starts over.   /Thomas ... View more