If this is for the management IP - why bother making it static at all? ... View more

If you do an nslookup on the MX250 IP address it doesn't resolve to that name by chance does it? ... View more

It's not what you would expect, is it.   The URL categorization is a service provided by BrightCloud.  It is used by Meraki and many other vendors. https://www.brightcloud.com/tools/url-ip-lookup.php   I guess you could regard a VPN service as "Internet Security" - I guess it depends on your view point.   ... View more

This is an overview page and includes a link to a webinar if you want to lean more. https://meraki.cisco.com/solutions/sd-wan ... View more

Stop it, I'll get a big head.:-) ... View more

The checks are done when AutoVPN is enabled (so the template should be configured to be a spoke).  The subnet must be unique amongst all AutoVPN networks (or will be rejected). ... View more

Hmm, that is interesting.   I was just looking at a clients MX, and they have manual port forward configured and have dual WAN circuits.  We are using SD-WAN - and the WAN ports are running AutoVPN active/active - and it is working.   One thing of note though is that their WAN2 has a public IP directly on it - so no NAT is required for AutoVPN to WAN2. ... View more

ps. I gave up on using Powershell for scripting.  One of the issues with it is that when you start powershell running for a one off job (such as a triggered event or task scheduler (for example)) it has to instantiate the whole .Net engine.  This can take a couple of seconds.  If you are trying to run a lot of single fire operations this creates big problems.   The .Net instantiation is a really slow process, and inherent in the powershell architecture - so can not be fixed.   .Net apps suffer the same issue when you recycle their application pools in IIS.  I have clients with apps where IIS can't process any requests for 5 minutes after a pool recycle.     You may find moving off to other scripting languages like Python will be your best fix. ... View more

First I would remove all the compulsory sleep operations you have.  The rest is taking long enough without adding those. Start-Sleep -Milliseconds 200   The next thought on my mind is weather this is static routes on an MX or MS.   If it is on an MX have you considered using route tracking? https://documentation.meraki.com/MX/Networks_and_Routing/MX_Routing_Behavior#Static_Route_Tracking ... View more

@jdsilva only a single policy can have a schedule.  So if the Morning policy has a schedule, you can not attach a second schedule to the Afternoon policy. ... View more

Templated networks can have unique /24's per site - and it sounds like you should be using templates. https://documentation.meraki.com/zGeneral_Administration/Templates_and_Config_Sync/Managing_Multiple_Networks_with_Configuration_Templates#MX.2FZ1_-_Template_VLAN_IP_Address_Range_Allocations Then if you change the template every site will get updated automatically.   It will be a big effort to change over.  You'll want to create a template by copying an existing network first (to get most of the settings).  Set the template to use unique addressing.  Then you can bind one network at a time to the template.  note that when you bind a network to a template it will loose the existing subnet assigned - so you will need to go into the bound network afterwards and configure the subnet you want to use again.   Using a template will make sure all of your sites are configured identically. ... View more

I am also using the free legacy version of Meraki Systems Manager.   However I am enrolled in the Apple Business program (business.apple.com), rather than the Apple Education program.  I wonder if that is the difference. ... View more

Meraki have an open API, so IronWiFi would just need to integrate with it.   I believe Splash Access already provides integration with Azure AD if you don't mind using a third party. https://www.splashaccess.com/cisco-meraki-azure-ad-with-splashaccess/ ... View more

You can't get exactly what you want, but check out the Organisation Summary report, as it gives close to what you want. https://documentation.meraki.com/zGeneral_Administration/Monitoring_and_Reporting/Summary_Report_Overview   ... View more

It looks like MaaS360 is some kind on on-premise virtual appliance?   How do the clients find it?  Via DNS?  If so, is there seperate internal and external DNS entries being used to handle clients being inside or outside your network?   Is the SSID operating in bridge mode and just using your internal DNS servers?   ... View more

Not using SAML, no (at least not out of the box).   But I see Okta have an LDAP interface: https://www.okta.com/blog/2018/09/move-ldap-authentication-to-the-cloud-with-oktas-ldap-interface/   And you can configure LDAP splash page authentication. https://documentation.meraki.com/MR/Splash_Page/Configuring_Splash_Page_Authentication_with_an_LDAP_Server     ... View more

Not much much ... but I'm based in NZ and it is not greyed out for me.   This makes me wonder if there is something wrong with your Apple business account.  If you log in manually using that account you don't get any agreements to accept or anything?   ... View more

Note that a MX in concentrator mode can advertise a static route.  Check out this post I did describing how. https://community.meraki.com/t5/Security-SD-WAN/Vmx-100-routing/m-p/18526/highlight/true#M4455   As @GreenMan says, the OSPF support only advertises AutoVPN routes.  I does not listen to routes.   If you really want to go down this path you should open a ticket with support and ask to go on the BGP beta program, and change to using BGP.  The BGP support is two-way. ... View more

@BrechtSchamp they have even udated the documentation to use the method I was recommending in that article.   https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair#Recommended_Topologies ... View more

Is the date/time on your machines roughly correct? ... View more

Does the dashbard show that the vMX is online? Does the dashboard show that the vMX is registered as a VPN end point? ... View more