If you'd like, you can share the Ike gateway and VPN tunnel settings. I'm familiar with Palo Alto and might be able to help. But just in case, is NAT traversal enabled on the Ike gateway? If not, try enabling it.     ... View more

The MR55 negotiates power dynamically based on its current needs. It may not always draw the maximum, for example, if not all radios are active or under heavy load. ... View more

To be honest, I think both work. Have you tried them? ... View more

No, you have to use this one.   https://developer.cisco.com/meraki/api-v1/get-device/ ... View more

This is what the release notes indicate. ... View more

No, Meraki Access Manager does not currently include a built-in Certificate Authority (CA) to issue client certificates.   Meraki does provide its own RADIUS server certificate (used by Access Manager and local RADIUS on MR) that you can download and install on client devices to ensure trust during the TLS handshake.   Access Manager - EAP-TLS Client Configuration (Windows, macOS and iOS) - Cisco Meraki Documentation   However, when you use Meraki MDM, you can use Meraki certificates.   https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Configuring_EAP-TLS_Wireless_Authentication_with_Systems_Manager_Sentry_Wifi#Configuring_EAP-TLS_using_Systems_Manager_Sentry_WiFi_Security       ... View more

There are known issues with routing and failover in non-Meraki VPNs: Re: New MX 19.1.9 stable release candidate: fixes MX75 becoming unresponsiv... - The Meraki Community     Known issues During the upgrade process, MX appliances upgrading from version prior to MX 19 may experience a failure to properly classify traffic. This issue will be resolved once the appliance has completed the upgrade to MX 19. (MX-36307) Due to an issue under investigation, MX appliances may incorrectly route traffic destined to subnets learned through eBGP over a Non-Meraki VPN connection. (MX-34803) When failover is configured between non-Meraki VPN tunnels, the Route Table page on Dashboard may incorrectly show the route for the primary VPN tunnel is inactive. (MX-36316) During the upgrade process, MX appliances upgrading from versions prior to MX 19 will experience a failure to connect to non-Meraki VPN peers if any VPN peer names contain a space. This issue will be resolved once the appliance has completed the upgrade to MX 19. (MX-36312) ... View more

Take a look at this.   The Bulk Network Creation Tool is available only if your organization has at least one configuration template created. Without a template, the option will not appear in the dashboard.     Using the Bulk Network Creation Tool - Cisco Meraki Documentation ... View more

Meraki MS switches do not support traditional redirect ACLs like Cisco IOS switches. Instead, Meraki uses a "walled garden" approach.   Meraki does honor the url-redirect attribute returned by ISE in the RADIUS Access-Accept message. This is used to redirect the client to the ISE posture portal.   Meraki does not support Cisco-style dACLs. Instead, it uses Group Policies.   Refer the documentation. "These steps show how to configure ISE Authorization policy for wired employee access using 802.1X as well as supporting wired guest users with the hotspot portal.  Just like Meraki Wireless platforms, Meraki switches now support advanced use cases such as MDM enrollment, Native Supplicant Provisioning (BYOD) and posture assessment.  Please see the wireless section for information on how to configure these advanced uses cases."   https://community.cisco.com/t5/security-knowledge-base/how-to-integrate-meraki-networks-with-ise/ta-p/3618650 ... View more

The only option available is the one described in the documentation. Bulk Configuring Quality and Retention Settings Through Profiles - Cisco Meraki Documentation   The other way would be via APIs, but you will need programming knowledge.     ... View more

  You can simply do a packet capture on Palo Alto or check if you are experiencing any drops on Monitor.   https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClTJCA0   https://kb.wisc.edu/security/page.php?id=90826   ... View more

This is the best way to configure in parallel and replace in a maintenance window. ... View more

This is normal regarding the AP port, it occurs every time a client roams from one AP to another. ... View more

This is not common and can be caused by a variety of reasons, such as: Port flapping (e.g., due to a faulty cable or loose connection) BPDU conflicts (multiple BPDUs received in a short period of time) Misconfigured STP settings or network loops ... View more

Knowing Palo Alto is probably missing some firewall rule. ... View more

Unfortunately, Firefox for Android does not support remote homepage configuration via Meraki MDM directly.   You might be able to get something done using Kiosk. https://documentation.meraki.com/SM/Profiles_and_Settings/Android_Kiosk_Mode_in_Systems_Manager   ... View more

What about disabling VHT/HE mode? ... View more

What is the minimum bitrate setting? Try disabling VHT/HE mode.     ... View more

Hi @david_n_m_bond    You can submit a feature request using the "Give youe feedback" button.   https://documentation.meraki.com/General_Administration/Other_Topics/Give_your_feedback_(previously_Make_a_Wish)   ... View more

To tell you the truth, I have a scenario similar to yours, two HUBs in different data centers and both with a static route to the 10.0.0.0/8 network, and I have no problems at all. ... View more

Instead of a broad 10.0.0.0/8, define only the subnets that are actually behind the core.This allows AutoVPN to take precedence for more specific prefixes.  ... View more