It's kinda tough for Meraki as there are so many moving parts.   There might be 5 parts to the solution that all need to come together at the same time, but before they do you have to have all your documentation and marketing created.  Then lets say one part doesn't get out of QA in time but is close.   To you delay the whole lot because of a minor part of the solution not being ready, or carry on knowing that only a small number of customers will be affected. ... View more

I don't believe this product has been released yet (hence the lack of pricing).   If I had to take a guess (and this really is a guess) I would say it will see day light in the next 2 months. ... View more

ps. I'm hoping to make it to 12 months as leader, and then I can hibernate for a while. ... View more

@jdsilva well, to team up one of you would have to stop participating - or you could form a kudo team - were you constantly kudo each other - or I would have to get really sick again - or the hard way, where you actually earn the kudo's.  🙂   I just checked your profile, and it appears you have had more Kudo's from me than any other person.  Ditto for @Adam.  🙂   ... View more

Well done team! ... View more

Thanks @CarolineS for the recognition. ... View more

Unless it is a USB 4G failover, it can not be done. ... View more

I've said it before and I'll say it again - you do realise you can do active/active for AutoVPN deployments?   Here is the basic guide using BGP: https://documentation.meraki.com/MX-Z/Networks_and_Routing/BGP   Here is the DC-DC failover guide: https://documentation.meraki.com/MX-Z/Deployment_Guides/Datacenter_Redundancy_(DC-DC_Failover)_Deployment_Guide ... View more

I think they could stop forwarding packets for 15s.  It is a little version dependent.  This is not something I have done very often. ... View more

They can't possibly detect that client VPN is enabled.  All they can detect is that they got an IKEv1 response.  That could also be because of site to site VPNs.   And until they commence VPN negotiation (which they can't without an initial authentication) you don't see the encryption algorithms available.   Furthermore, the encryption algorithms available are the same for IKEv1 and IKEv2.  IKEv2 is just a refreshed version of IKE that made a lot of the defacto standards a "proper" standard. ... View more

How does using IKEv1 or IKEv2 alter anything to do with PCI compliance?  I have never heard of this, so would be interested in the feedback.   The Client VPN uses L2TP over IPSec (which uses IKEv1).   Would not moving to 2FA for client VPN alleviate most of the concerns? ... View more

Plug the new switch into an existing connection, and give it a good 45 minutes to upgrade its software.  It must be running the same software as existing stack members.   Hopefully your existing stack has a full "ring".   Break the ring, and plug in your new switch, and re-form the ring.   Within maybe 5 to 10 minutes if you go to "Switch/Switch Stacks".  It will report there is an additional member than can be added to the stack.  Let it add it to the stack.     You are done.  Note that depending on the code version they have be a short disruption to service while you do this, so do it out of peak time. ... View more

Does the order email list an MX84-HW?  If it doesn't appear in your inventory then that suggests it was not added correctly. ... View more

You realise that you don't have to buy a license for a warm standby - so that second unit is considerably cheaper than the first? ... View more

You can't define it.  It is "baked" in. ... View more

It already does this. ... View more

To the best of my knowledge, no and no. ... View more

Perhaps trying also adding the machine using a managed profile.  Some of the settings get deployed that way. ... View more

I don't know the answer for sure.  I think it is either hourly or daily. ... View more

Is your custom splash page (hosted externally I am assuming) "whitelisted" so that users have permission to access it? ... View more

You do realise the "Z" series is primary for telecomuters to provide access via AutoVPN back to some centralised resource?  As such, it doesn't really need to be that fast.   It does not support any of the advanced security features, like AMP.  If you want actual security features you should be using the MX series - and they come in a whole range of different throughputs. ... View more