The spare MX does not need an uplink in both WAN interfaces, it just needs to have at least one source to the internet to function. However additional uplinks will provide redundancy.   With the Meraki warm spares you shouldn't have a heartbeat cable directly between the two. They will need to be able to see each other on the LAN though so they can send VRRP packets to each other and know when to fail over or not. ... View more

Glad I can help out. For sure let us know what you find out from your Verizon rep. ... View more

As for the devices that were deployed prior them added to DEP. Those will need to be wiped and re-setup. It's during the activation of the setup process that they enroll themselves in DEP. You can still add them to the Meraki MDM and manage them, but to supervise them and use DEP they will need to be wiped.   For the SN's not matching up with what you are seeing under SM > DEP. Is it possible that some of your SNs that you set up previously just were not added by Verizon to your DEP account? Are you able to get a report from Verizon of the SN's they enrolled into Apple Business Manger for you and a report of devices they sent you and compare those to make sure they did not mix something up? ... View more

Have the enrolled devices been turned on and set up? When a device is assigned to your Meraki EMM server it will show up in the DEP list under SM > Mange > DEP (this will also display the network they are assigned to), Once the device has been turned on and set up (gotten to the home screen) it will then show up in the network you assigned it to and when viewing it in the DEP list will then say the enrollment is pushed as apposed to assigned (Screenshot below).   ... View more

Do you have your MX set up with a static IP for the WAN or is it using DHCP? ... View more

I have previously and have never had major issues with them. I actually can't really think of any specific bugs running a firmware like that either. ... View more

@NolanHerring No issues in particular now, just wary of updating to a firmware that states known issues for some of my hardware and I haven't yet tested. ... View more

@jdsilva I would be interested to see what you find, especially if your lab has any MR32s/34s. I have been hesitant to roll it out due to known issues on those MRs and have lacked the time to test it myself. ... View more

I would suggest to add the MRs to the same network as the MX and MS. You can then use the template features to keep all the MRs (MX and MS as well) in sync as far as firmware and settings go. My guess as to why they had the MRs in a single network was because of shortcomings in the templates a few years ago, or just lack of understanding. I think having networks define the location is very helpful when troubleshooting issues or just viewing network statistics.   Here is a link to Meraki's template documentation, take a look and maybe test it out.   https://documentation.meraki.com/zGeneral_Administration/Templates_and_Config_Sync/Managing_Multiple_Networks_with_Configuration_Templates ... View more

On a test iPad that I put into single app mode I am able to press the sleep/wake button and put it to sleep and then wake it up again. What iOS version are you running on it? Im running iOS 12, but I wonder if iOS 11 might handle that differently. ... View more

Screen brightness isn't something you can manage through an MDM and single app mode restricts the use of control center so you can't manually dim the display while in single app mode. You could set the brightness first, then put the device into single app mode. ... View more

@jdsilva I agree with that. I don't think it would be very reliable. It would be helpful if the "Traffic shaping rules" also had a SpeedBurst option like the "Global bandwidth limits" offered. ... View more

No, the switch has some QoS settings you can apply, but you don't have any traffic shaping options for the switch. ... View more

There isn't a good way to do that. About all you can do is in traffic shaping on the security appliance is set a bandwidth limitation for the subnet. ... View more

Are all those addresses the same? And do you have the "Move map marker" box checked? ... View more

I don't know what would be causing that, but have you tried in an incognito window or another browser to see if it's an issue with an extension or something? ... View more

If you get a new push certificate you would need to wipe the iPads and re-enroll them.   If they iPads are enrolled in DEP (Device Enrollment Program) then you should be able to have someone wipe them, either from the iPad settings, or with a computer (Apple Configurator or iTunes). Then DEP would re-enroll them for you.   If you don't have DEP then you are going to need to wipe them and re-enroll them manually, Apple Configurator would probably be the easiest for that, but would require you to physically have them. ... View more

Thanks @jdsilva! It's been great to share a bit of knowledge and insight and be able to gain some from others like you and @PhilipDAth. ... View more

Just create a new network. When you create the new network you can check the box that says clone and clone the settings from an existing network. Then you can just move the devices to that new network. ... View more

@khowanitz I find that Meraki's beta firmware releases to be quite stable. I would highly recommend testing before changing firmware revisions, but that would be for beta or stable. ... View more

What is in the subnets 192.168.185.1/24 and 192.168.19.0/24?   Are you using static IPs for your WANs? ... View more

I know MX13.xx has some issues with AMP, particularly the Whitelist. Meraki has done a lot of work in the MX14.xx firmware revisions to improve this and has worked from my observations. I would suggest trying that out for you. Maybe try updating a test environment first to make sure it doesn't have a bug that might cause an issue for you. ... View more

That sounds a little strange. In my experience if the connection between the two MX appliances fails then both MX's will act as a primary to provide internet access to both sets of now separated clients. The MX appliances talk to each-other directly, and it's this that helps the spare determine if it should assume the role of master (when it no longer gets VRRP responses from the default master). Is there any way that the spare MX can see the primary MX even after the LAN on the primary MX "fails"? This would prevent the spare from assuming the role of master and if that is the only route out for some clients I could see how it might prevent them from getting out to the WAN.   https://documentation.meraki.com/MS/Layer_3_Switching/MS_Warm_Spare_(VRRP)_Overview   Also I like to ask what firmware you are running as this might just be a bug in the firmware that someone may know about.     ... View more

Of course. Glad I could help! ... View more