It looks like you could pull this with the API: https://developer.cisco.com/meraki/api/#/rest/api-endpoints/ssids/get-network-ssid     ... View more

Also, did it ever work correctly or is this something that started happening recently? ... View more

Can you share your settings?  I wonder if it could be someone nearby sending deauths.  You could try changing the SSID name or adding another SSID to see if shows the same. ... View more

Nope.  Only one VLAN this way.  Try Engenius for a proper, inexpensive wireless bridge.  ... View more

Agree with jdsilva about syslog.  This should let you see what is going on at make some better decisions.  In case you are not familiar with syslog I can suggest papertrailapp.com for a cloud based syslog server that is easy to setup.     ... View more

1 million events per day seems excessive..  Have you contacted support to see what they think?   What are your average number of clients over 30 days?  It seem like a configuration problem or maybe a DOS attack of some sort.     Are there noticeable performance issues around this?     ... View more

And if true, I suspect it will come with interesting limitations and maybe just designed for basic monitoring and visibility of a mixed environment, not full configuration. ... View more

Hard to believe, but it does seem plausible and a good direction.  I have not heard anything like this, but I have heard there will be some new product announcements in a couple weeks..   I suppose almost everyone would rather see AnyConnect support though 😉 ... View more

Do you have any ports opened inbound?    Under threat protection are you set to detect or prevent?   It is not uncommon to see messages about attacks like this, but you would need to have RDP open to the public Internet for someone to compromise you. ... View more

So on Catalyst when you create a trunk port maybe it has no native VLAN at default?  I thought VLAN 1 would be native at default. ... View more

It would be pretty hard do define overall best practices, but I have been thinking about doing this for my home network for security concerns.  With my ever growing collection of "smart" devices and speakers I am concerned with the attack vector that could allow access to my network through a compromised or backdoored smart switch/speaker/light/camera/lock/thermostat, etc.  The hard part is really figuring out what inter-VLAN access might be required or desired to operate.  Each device can have different requirement and might be difficult to work with when on a different VLAN than the one used for general internet access.  Good luck.     ... View more

You might check this: https://apps.meraki.io/details/vapp-firewall-config-backup/     ... View more

Have you tried hovering over the bar that shows the red disconnects?  It will show a bit more detail.  For example, it will distinguish between a power loss and DNS issue and indicate a precise time. ... View more

@CashG wrote: @BrandonS "Or- hopefully the VIP is assigned tagged to a sub interface and in that case you would want the port connected to the server to be trunk with VLAN 8 tagged."   If I have it set with VLAN 8 tagged and VLAN 1 untagged you think 10.10.0.80 will still work? Or No VLAN 1 added at all? If so would the 10.10.0.80 still work? I would consider trying this.  You would need to ask the server admin if she can/will verify it is possible to add the IP as a sub-interface with a VLAN ID.  That should allow it to be more like a "normal" client with a subnet and default gateway.  In that case you would need to connect to a switch port configured as trunk with VLAN 8 tagged.   The output you posted with the 4 NICs is confusing to me.  It shows interface ip addresses with default gateways outside of their subnet.  That does not compute for standard networking, but I am sure there is some reason..   ... View more

What is the subnet of the virtual IP on the server?  I am suspecting this maybe something a bit odd like two IP addresses assigned to the same interface and subnet (like /16). Or- hopefully the VIP is assigned tagged to a sub interface and in that case you would want the port connected to the server to be trunk with VLAN 8 tagged.   ... View more

@CashG wrote:   I could ping when I have a PC on 10.10.0.0 connected directly to the MX with its port set to Native VLAN 1 and then a PC on 10.10.8.0 connected directly to the MX with its port set to Native VLAN 8.   I would take this to the next step and make a trunk port to your switch and then have an access port for each VLAN to do the same test between two of your own machines that you know have default gateway.  I expect it will still work and then you can tell whomever supports the UNIX server that they need to check their end again.  I think you mentioned that you do not have access to the UNIX server, right? ... View more

@CashG wrote: My issue is a Unix server that has a IP  of 10.10.0.60 but then also has a virtual IP of 10.10.8.60. The virtual IP has no static gateway set for the VIO.  Is it possible the Unix server has no default gateway assigned?  Or one different than you think it is?     ... View more

I would not give so much weight to it.  Unless you are planning a large purchase like hundreds or thousands of MX's and specifically need WiFi6 for something, there will always be something new around the corner.  And I agree with the other posters from my past experience it does not seem like a new wireless model is coming soon. ... View more

As stated, the warm spare method is not a possibility, but I am pretty sure I recall a few years ago having a customer do a similar upgrade and support was able to manually reduce their existing, lesser model license to the appropriate length based on price difference of the higher model.  Something like, 3 years left on MX64 changed to 1 year for an MX84.  You could call support and ask if that is possible.  It would seem fair.. ... View more

Maybe the device you can't reach has ping block/disabled?  Did you try to reach other resources besides ping? ... View more

Maybe a typo somewhere or a firewall rule you forgot about?  Sorry, that's all I got.. ... View more

Do you have the correct default gateway on the devices you are testing with?   ... View more

Agree with @Richard_W but will add that it can be problematic because a lot of sites may have global servers.  Loading a Facebook page, for example, may hit servers in various countries.     ... View more

@mattia try this: https://www.dropbox.com/s/bguhpmhze38txck/umbrella-aag.pdf?dl=0 ... View more