Meraki

RaphaelL

Well a MTU of 1000 on the wireless wouldn't make any sense for that kind of issues. It would break more things than Webex and Teams. TCP TLS packets are (always?) sent with DF bit set, so they would be dropped and nothing would work.

RaphaelL

Isn't that expected ? https://documentation.meraki.com/SASE_and_SD-WAN/MX/Operate_and_Maintain/Monitoring_and_Reporting/Appliance_Status/MX_Uplink_Settings Note: Modifying the following items will result in WAN interfaces being reset. State (enabled/disabled) of any WAN interface Addressing method (static/DHCP) of any WAN interface State (enabled/disabled) of any LAN interface This will result in a loss of connectivity on both Internet uplinks for up to 2 minutes. Therefore, it is recommended to only make changes during a planned maintenance window so that disruption is minimal. How long does it take to failover ?

RaphaelL

I wouldn't be surprised to finaly see a sunset on L2TP. Something like MX 26 to be the last version offering support for it.

RaphaelL

I have never used SM , but I was surprised that no one ( either from Meraki lol ) posted about here except for this post that you commented on earlier. Like you said Intune and Jamf probably have most of the market share

RaphaelL

First Meraki product to have the CalVer format

RaphaelL

Security appliance firmware versions MX 26.1.1 changelog What's new Expanded BGP attribute support to include outbound well-known and custom communities and increased route integrity with inbound filtering. Client VPN now supports IKEv2 for establishing connections. VPN full-tunnel exclusion now includes source-based and NBAR application-based exclusion definitions. Added support for encrypted (TLS) syslog Legacy products notice When configured for this version, Z3(C) devices will run MX 19.2.4. When configured for this version, MX64(W), MX65(W), MX84, MX100, and vMX100 devices will run MX 18.107.13. Other The product complies with EN 18031-1:2024 and EN 18031-2: 2024

RaphaelL

also why is it I can't disable IPV6 on the WAN if I don't want to use it? I really feel you...

RaphaelL

I just checked my last firmware upgrade on 2025-08-03 All my networks were scheduled to start at the same time. From the same template : "time": "2025-08-03T03:53:16Z" "time": "2025-08-03T03:41:16Z" "time": "2025-08-03T03:31:16Z" "time": "2025-08-03T02:40:17Z" "time": "2025-08-03T03:36:17Z" "time": "2025-08-03T03:57:16Z" Standalone networks : "time": "2025-08-03T02:40:16Z" "time": "2025-08-03T02:40:16Z" "time": "2025-08-03T02:48:17Z" "time": "2025-08-03T02:40:17Z" "time": "2025-08-03T02:38:16Z" Again I might be wrong but from what I recall all non-templated networks start at the same time ( +/- 3 mins ) and all child network from the same template are in sequence.

RaphaelL

If I recall correctly ( and I might be wrong ) the dashboard will schedule all networks from the same template in a sequential order. NetA 00h00 NetB 00h01 NetC 00h02 So I think the best way to see how long the upgrade will take to complete , just create a fake upgrade in a few days and see the result. We have templates with a few 100s networks and it takes less than 2 hours to complete.

RaphaelL

I don't have these APs but the first question to ask : In what environnement are you deploying ? Open spaces , low , med , high density ? Knowing your end goal would help other to suggest a good and balanced profile

RaphaelL

This is really annoying. Also happened to us on nov 24th. Ctrl+F5 is the "fix"

RaphaelL

Both Ryan and alemabrahao are right. Also keep in mind that trunking on small MX behaves really weird. If you put allowed vlan ALL , this "All" only includes the vlan created on the MX. So if your switch sends BPDU on a vlan that doesn't exist , it won't be forwarded. This is the equivalent of bpdu filter and can cause nasty issues.

RaphaelL

You can configure a port range.

RaphaelL

Yes.

RaphaelL

What firmware version are you using for all products ? What is the SSID configuration look like ? Bridge mode , NAT ? Are the issues with Teams only P2P calls or bridged calls also suffer ? Have you taken any pcaps ? Teams video , screensharing is easy to see in a pcap.

RaphaelL

Wow that would be perfect ! Naming the AP via API sounds excellent too. Thanks for the follow up !

RaphaelL

@cmr Theres a part about DHCP options that might interest you

RaphaelL

I do confirm that this is the bug that I found in feb 2024 and it's fixed !

RaphaelL

I'm having the same issues. I'm just tired of opening cases 😪

RaphaelL

- Dashboard packet capture now always displays "failed to connect to server" and then after a few minutes waiting it does download the capture. I'm guessing this is from the new UI ? That problem haunts me.

RaphaelL

I still don't understand why the switch would perform DNS inspection

RaphaelL

Take packet captures. Packets don't lie. Are the phones sending their packets with the DF bit set ?

RaphaelL

I wasn't aware of that presentation. Such a great read !

RaphaelL

Where is that 20ms limit from ?

RaphaelL

Hi , https://developer.cisco.com/meraki/api-v1/get-network-clients/ are you using this endpoint ? You can filter on manufacturer , deviceTypePrediction

About RaphaelL

RaphaelL

Raphael Letourneau

Community Record

Badges