This reddit thread has someone in your situation and seems to have gotten it working: https://www.reddit.com/r/meraki/comments/1deabnz/azure_vmx_nsg_use_after_basic_to_standard_public/mbn6xce/. You will have to redeploy your vMX as of now.   You  may want to take the opportunity to switch from concentrator mode to NAT mode. The MX would operate as normal firewall at that point and you could safely leave the NSG on the external interface to allow anything. https://documentation.meraki.com/MX/Other_Topics/vMX_NAT_Mode_Use_Cases_and_FAQ   ... View more

We are all  happy to help, but if you need step by step instructions and the documentation we are providing does not make sense, you may want to engage your partner for assistance. ... View more

While the documentation indicates there may be minimal downtime, in my experience Org Splits do not incur downtime. The only thing that would be down when performing a split is VPN between the old org and the new (if that's something you still need) since you'd have to recreate it as third party vpns.  You will have way more downtime and way more work doing things manually. The time waiting to import the devices into the new org as inventory updates between shards can be 10-20 minutes in my experience plus whatever time you need to actually program things once they are brought over. ... View more

Yes that will work. I do this all the time with ISE. ... View more

It should connect to the Dashboard as long as there is internet. Whether your ssids will work as intended will depend on how they are setup. If you are using VLAN tagging you will probably need to adjust that. If any of your connectivity needs require things only accessible from the other site, that will not work.   You could investigate this: https://documentation.meraki.com/MR/Client_Addressing_and_Bridging/SSID_Tunneling_and_Layer_3_Roaming_-_VPN_Concentration_Configuration_Guide if your require access to things behind the MX. ... View more

It will certainly be simpler, I would just verify your throughput needs won't be hampered. The MX84 will cap out around 320 mbps if security features are enabled and 500mbps total. The 5516 can handle up to 1.8Gbps total and 450ish if security features are enabled. ... View more

Access Manager, which is currently in preview, would be the only built in way to do this without setting up RADIUS: https://documentation.meraki.com/Access_Manager It's currently only available on some shards and will require some level of licensing once it's fully released. ... View more

My main comment would be, why are you replacing a 5516 with an MX84? Both devices are announced EOL in 2026 and the 5516 provides more throughput and features. I can certainly see if your setup is simple enough migrating from ASA to MX, but I would want to be implementing a current model so I don't have to change things again in just over a year.   For STP I encourage you to read this article: https://documentation.meraki.com/MS/Port_and_VLAN_Configuration/Configuring_Spanning_Tree_on_Meraki_Switches_(MS) There is example code for IOS interoperability and an overall section on interoperability. I can't speak specifically to an environment such as yours you would have to consult the documentation for each vendor/operating system.   Regarding your comment about the ports connecting the firewalls to the switches, yes the trunking settings will have to match. I don't have a specific recommendation as it's really an either or scenario. One side you will have to change and one side you won't. It doesn't IMO matter which one. Honestly my biggest recommendation is perhaps work with your partner or account manager and get some engineering assistance. You have a somewhat complex environment and I'm guessing based on the Nexus switches perhaps some mission critical items. What you want to do is definitely doable but may require more detail to properly plan than we can realistically provide here. ... View more

Yes can confirm essentials will be fine for that. ... View more

My gut feeling is the IOS XE code is ready for the 9200s but some difference in the Ls vs not Ls is significant enough the back end is not officially ready.   Curious what they end up telling you because Id love to be able to be selling 9200s in Meraki mode. ... View more

It's a 9200 not 9200L??? Those are not supposed to work in cloud managed mode yet... interesting if it's otherwise working but you want to check with support as you could end up in a sketchy situation. ... View more

1. No, as long as the port will provide Internet access that allows for connectivity (https://documentation.meraki.com/General_Administration/Other_Topics/Upstream_Firewall_Rules_for_Cloud_Connectivity) you will be fine. 2. Yes.  ... View more

The MS130 must have internet access to connect to the dashboard. Generally I connect one port of my DMZ switches back to my inside lan to allow management connectivity. You could however assign one of your ISPs available static IPs if desired. If you have multiple ISPs, I strongly recommend the former to ensure management remains up during an outage of one ISP. ... View more

This old post by @PhilipDAth https://community.meraki.com/t5/Security-SD-WAN/VPN-Concentrator-Operating-Mode-Comparison/m-p/31039 still pretty much covers the basics. In my mind it's first a decision as to whether the MX450s are going to be your main sites firewalls plus the SD-WAN hub ( use NAT Mode) or just the SD-WAN Hub (either mode may work). Philips post gets into this well, IMO. ... View more

SMS is not always reliable unfortunately.  If you continue to not be able to login you can open a support case and they can turn it off with another org admins consent. Regardless I suggest switching to use an 2fa App once you are back in.   https://documentation.meraki.com/General_Administration/Other_Topics/Two-Factor_Authentication ... View more

I believe you could only do that by making them hubs as well. All your hubs would be meshed but your spokes need only use your primary hubs for connectivity. ... View more

I don't, but if you have access to CCW-R you should be able to just load the serial and then pick the appropriate service level. ... View more

There is no officially documented escalation process for Meraki (unlike regular tac). I found this quite old forum post: https://community.meraki.com/t5/Off-the-Stack/Question-about-Support-Escalation/m-p/12944 which is basically just a normal ask for a manager. Your account rep is definitely an escalation resource, but if something has gone to development I can tell you it's pretty much a black hole.  ... View more

Then you would want to look at configuration sync. If you have a combined network you'd need to split it temporarily to be able to use that functionality. ... View more

Yes see here: https://documentation.meraki.com/General_Administration/Organizations_and_Networks/Cloning_Networks_and_Organizations_in_Dashboard You can either start over with a new Cloned Network B, or possibly use configuration sync. You course also need to make sure your switch settings match, but that would be something you'd need to do manually or via APIs/Scripting. ... View more

SD-Internet is just the marketing name for the ability to use SD-WAN technology to steer internet traffic (rather than just AutoVPN aka private WAN) over specific WANs  based on various criteria:  SD-Internet overview: https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MX_Security_and_SD-WAN/SD-WAN_Internet_Policies_(SD-Internet) SD-WAN overview: https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design/Best_Practice_Design_-_MX_Security_and_SD-WAN/Meraki_SD-WAN   ... View more

Thank you for the update. Would be great if the new CCW wizards were not mandatory either. That was a related part of these changes. Adds several steps to each SKU add when working on quotes. ... View more

I have not seen this, but the issues with 19.1.7 seem to have been getting heavily documented on here as of late. The more data support gets the better chance of finding and fixing the bugs so I do appreciate you working with them rather than just rolling back. ... View more

I checked a couple of shards and no issues ... View more