Do you have a default group policy configured?   Note: If a default group policy set and group policy with Filter-ID is also enabled, the Filter-ID policy passed by the RADIUS server will take precedence over the default group policy. ... View more

Can you perform a test changing it to send all traffic through VPN? ... View more

How is configured the client routing?     ... View more

And just so you know, I'm talking about VMware Workstation, okay? I've already performed several network migrations with virtualized environments (VMware EXI, Microsoft HyperV, Xen, etc) and never had any problems. ... View more

Just for testing, if you apply the Group policy directly to the client, is the result the same? ... View more

So use a Cisco ASA, or open a support case. ✌🏼 ... View more

Yep, I'm sure. 😉 ... View more

@DscRafael it's a VMware limitation, on Microsoft hyperv it works well  ... View more

It'  VMware limitation. 😕 ... View more

Forget it, VMware running directly on Windows will not work, only with VMware ESXI. ... View more

Are you using VMware on a Windows desktop? It's probably a Hypervisor problem, not the MX. You can test it by setting up two physical machines on a different VLAN.   I'm saying this because I've come across the same situation running Hypervisor installed on a Windows machine. ... View more

It will depend on the need of each one, that is, the rule has no right or wrong. In some cases, some people choose to have a single template to facilitate network management. In another, people choose to have a template for each location, but this is usually when you have some particularity for each location.   And is not possible to upgrade a specific AP on the template. ... View more

You can also perform a packet capture. ... View more

Did you ask Meraki support? ... View more

Yes, you can.   You just need to change the regulatory domain:   https://documentation.meraki.com/MR/Radio_Settings/MR_Regulatory_Domains#:~:text=The%20regulatory%20domain%20can%20be,regulatory%20domain%20for%20the%20network. ... View more

It's very subjective, it will depend on what you need for your network, do you have any specifications? ... View more

You can try check here:   https://connectthedots.cisco.com/connectdots/serviceWarrantyFinderRequest?fl=sf ... View more

Maybe It can help you:   https://community.spiceworks.com/topic/2358178-windows-server-2022-hyper-v-switch-embedded-teaming-with-stacked-switches ... View more

I believe LACP/Dynamic is the correct setting for the Meraki Switch. ... View more

https://meraki.cisco.com/product/switches/switches-accessories/ma-cbl-40g-1m/ https://meraki.cisco.com/product/switches/switches-accessories/cbl-40g-3m/     ... View more

It doesn't matter if is Meraki Switch or Catalyst Switch.     BPDU guard BPDUs - Bridge Protocol Data Units - are informational messages communicated between all switches in a Spanning Tree instance to maintain STP consistency. BPDU Guard is used to protect the Spanning Tree topology of a network by enforcing STP domain borders. If a port with BPDU Guard enabled on it receives a BPDU, the port will transition to a disabled state. It is recommended that BPDU Guard be applied to all access ports or client-facing ports that are not intended to be connected to a neighboring switch.       In general, in all the projects I've followed over the years, I've never seen anyone use BPDU guard on AP ports. But it's up to each individual what they want to configure on their network. 🙂 ... View more

@RaphaelL    BPDU guard is enabled globally on all STP portfast ports with the command spanning-tree portfast bpduguard default. BPDU guard is typically configured with all host-facing ports that are enabled with portfast, but it is not very common to see configured on AP ports. ... View more