Why not set load balancing enabled with WAN1 as the primary uplink.  Then setup the flow preference you specified for the WAN2 traffic and if WAN2 is down it'll automatically failover to WAN1? ... View more

Seems you are not alone.  @hilehoffer posted about the same thing here https://community.meraki.com/t5/Security-SD-WAN/MX250-Stability-Issues/m-p/26639 ... View more

I try to make sure all of my timezones are configured correctly in Network Wide>General for each of my networks for the reason you just mentioned.  Any time schedules etc will be properly enforced to their local timezone.  ... View more

Or depending how you have the Meraki network configured in the dashboard they could be clients from other switches etc? ... View more

So two suggestions on this: 1.  Have you tried doing a capture to a pcap file instead of to the display to see if it makes any difference?  Are you seeing the traffic on the device connected to that mirror destination port? 2.  I had a similar issue to this with one of our Meraki switches where I couldn't see the mirror traffic in a capture either because the ports weren't in the same asic (maybe wrong terminology there).  I can't remember how many ports are grouped together in an asic (maybe 16) but basically, I had to make sure the source and destination ports were in the same asic for it to work properly.  ... View more

Agreed but the whole wireless camera thing has always been kind of funny to me.  If you can pull power to the camera (with or without some kind of adapter) then why not just pull a POE ethernet cable instead and get reliable power/data all in one shot?  But I guess it may make sense for some folks with legacy equipment.  ... View more

Awesome @Ben, share some pictures if they'll let you 🙂 ... View more

I think @Fady pointed out the most likely solution to your problem.  In many cases you can 1:1 NAT.  Go to Security Appliance>Firewall and in the 1:1 NAT section just put the public IP and point it to the LAN IP of the device you want to have that IP and you'll likely be good to go.   ... View more

I assume they are communicating with each other via a VPN tunnel? ... View more

Network Wide>Clients Select the client then select Policy>Blocked from the drop-down list. Let me know if you need a screenshot.  ... View more

Glad to hear you got it back working 🙂 ... View more

I agree with @francktls, I pulled a MX64 out of a network the other day and put it into a new network and it wouldn't check-in.  I had to log into its local status page to remove the static IP from the internet port so it could revert to DHCP to check-in.  So I'm not sure of the consistency on this.  Maybe if you set it locally you have to edit/remove it locally vs setting the uplink via dashboard? ... View more

Was there something you needed in the beta code set or can you drop them back to the latest stable?  Knock on wood, our MX's have been pretty stable.  ... View more

When you say both sites are completely Meraki do they have MX's as well or a different firewall? ... View more

Interesting, in my experience, the static IP information is independent of any dashboard moves.  All the MX config stuff gets overwritten by the network config though.  ... View more

@rinat that one should work fine.    ... View more

According to this https://meraki.cisco.com/products/wireless/mr33#tech-specs MA-PWR-30W-XX Meraki AC Adapter for MR Series (XX = US, EU, UK or AU)   But I agree with @AjitKumar, I usually use POE injectors for ease of AP installation.  That way I don't need power near the AP and I can just keep the POE injector in the data room near the switch.  ... View more

We keep a spare switch and MX on hand to avoid downtime waiting for the RMA device (even though Meraki is very fast).  If it is the same model as what you are replacing then you don't need a license.  If it isn't then you get 30 days before you have to get a license so it'll still work fine as a spare until you get your RMA device.  ... View more

@jhyoung09 For the switch static IP configuration have you specified VLAN 1?    Also on that MX trunk port you may want to try setting a native VLAN of 1 instead of drop all untagged for testing.  You can always tighten it up after you get it working.   ... View more

I suspect you may have to use a browser plugin or intermediary page to auto POST the login data to get it to login.  Otherwise, it'll timeout and need to be relogged in after reboot.  ... View more

And you can test your config by connecting a computer directly to the cable that is currently connected to the switch and setting it up with the same IP information to make sure you can ping the gateway and get to the internet.  One thing worth mentioning is that the management IP really just needs to be an IP that the switches can use to get to the internet.  ... View more

Yes that is possible.  I try to avoid doing that when I can just use one of the built-in copper ports but I've done it for sure at sites where I don't have many spare ports.  ... View more

@PhilipDAth the encryption Meraki uses for its VPN tunnels is likely FIPS 140-2 compliant but getting the actual devices certified is what we'd be after.  Cisco already does this with their ASA line of products and those have regular updates available.  So I don't see why Cisco couldn't do this for its Meraki line of products as well.  It cuts out a big chunk of law enforcement and criminal justice customers otherwise.  ... View more

I've run into a slightly similar issue to you and, simply put, it doesn't appear possible unless Meraki decides to start reading and displaying that info in the dashboard.     One of my ideas was to try to access the USB directly from a computer at the site by going to http://my.usb or http://192.168.1.1.  The problem with that is the MX will only route traffic to that USB device if the primary WAN uplinks are down.  Would be nice if we could set an internet preference to the Cellular but that isn't possible either.  I'll follow this thread to see if anyone has other ideas 🙂 ... View more