Great to learn new stuff 🙂   Does anybody know how we old CMNA's can get our hands on the Meraki Insigths license as well ?   ... View more

I performed what was indicated by @KarstenI on the MX I rolled back to 16.7 and it worked in terms of creating a valid certificate again.    I forwarded this thread to the guy I was speaking with on the ticket, but I haven't heard anything back yet, but at least the error is gone.  ... View more

I think there might be a bit confusion upon terminology here.   When you create a new Network in an Organization using the GUI, you can choose between different Network types - type specific or Combined.   If you create a network via GUI, and select Security Appliance, as the network type, using the API endpoint   GET /networks/{networkId}   should return   ... "productTypes": [ "appliance" ], ...     If you create a new Network on your organizations, using API endpoint   POST /organizations/{organizationId}/networks   you can set the Network type in the field productTypes   "productTypes": [ "appliance", "switch", "wireless" ],   If you select more than 1 type in productTypes, the Network Type will become Combined.     It is not possible to convert 1 network to a Combined, per se. What you can do is, if the Network does not contain the wireless product type yet, you can create a new Network as productType = wireless, and combine the new Wireless network with the original network using   POST /organizations/{organizationId}/networks/combine         ... View more

one key benefit of the bgp implementation is routes that drop from the hub will also get dropped from the spokes. in traditional autovpn the routes are more or less static routes. and when a route is down/unreachable it won't be pulled out of the spokes route table.   i'd recommend hitting up your local meraki tsa to get into the nuts and bolts all this all. ... View more

Finally!!!!   Absolutely amazing to have the MX100 replaced ... View more

Just to confirm:   at FCS it's definitely x2 active WAN uplinks, as other models, but you now have media flexibility.   I have requested that the datasheets be amended to bring clarity in this. ... View more

>Country Code - Site ID/Code/ - switch Number   I tren to use something similar to @DarrenOC .  Sometimes I used the nearest international airport code as well (depends on how many sites they have in different areas). https://www.ccra.com/airport-codes/  ... View more

I have a MG21 connected to a MS120-24P.  The switch is powering the MG21. The port the MG21 is plugged into is set up as Access (not Trunked) and a VLAN is specified.  There is another port on the switch set as Access and the same VLAN.  The cable plugged into that port runs into Wan2 on MX65.   This setup started working once I had the correct APN specified in the MG21 ... View more

This is not normal, so I think we should look at less probable causes.   How do you know the AP is rebooting?  What has led you to this conclusion?   What is powering the APs?   What appears in the AP event log in the dashboard? ... View more

@mmistretta wrote: [...] it wasn't until after configuring the local and remote IDs, the tunnel came up. Which is also a change in behaviour for MX15.42.1 firmware. From release notes;   ... View more

I like the old design more... Think I can´t find things faster, even when I´m used to it 😉     ... View more

Also note that when you divert access from China out to another country, that some websites inside of China will stop working (China doesn't allow some web sites to be accessed from other countries). ... View more

@RumorConsumer, just had a look at that switch’s data sheet and it states that it supports 802.1p CoS and DSCP. Since it’s unmanaged all I can guess is that it has some sort of preprogrammed QoS policies, and/or it just passes through the 802.1p CoS header.   The interesting part here is that the 802.1p CoS bits are part of the 802.1Q header that also carries the VLAN information. So my guess at what you’re seeing is that the 802.1Q header is being copied across the switch. Essentially this means that every port on the switch behaves as a pseudo trunk port. If traffic enters the switch untagged it will also leave the switch untagged, if it enters with a tag, it will leave with the same tag. ... View more

I have the same problem. Anyone know if there is a solution? ... View more

I'm betting on the MV72X. ... View more

@rossmeraki glad you got it working - always good to see the simplicity of the Meraki kit in action 😀 ... View more

Are you building the estimate in CCW?  You should see all the options under the item "select service/subscription" selection.  It looks like this, for example:     Keep in mind, these are an optional addition to the required subscription that already included 24x7 support and RMA. ... View more

That is a great suggestion. I will keep that in my back pocket moving forward. Thanks again to everyone willing to help! It is much appreciated! ... View more

Regarding the SKU types, the vMX-M does not choose the IP SKU for you. You have to choose it yourself. There’s four different types, and the exact difference in performance I have no idea. But you need to choose the right one, because depending on what you choose you’ll not able to utilise ClientVPN due to some firewall rules that are being applied the IP SKU. ... View more

hm, maybe you have to reset the not working switch to factory defaults and get it online directly to a internetconnection again. And you then leave it for a couple of hours. Further more you can get in touch with support to verify all is fine, after reset and keeping it online some hours as they can see more details in their dashboard. Had the quite similar problem and the Meraki SE saw more details and told me I plugged the switch off too fast (~45min). But he also said 30-45min is normally the maximum time range to do its initial update. ... View more

What about monitoring with statuspage.io for example? ... View more