I don't see why this wouldn't be possible as long as your STP design supported this topology. I.e MS320 (A1) as the root bridge and port costs, speed links etc would ensure that the STP topology would match your intended design. I.e The Meraki switches would just put the "highest cost" ports to the root bridge in a discarding state until a change in the topology was noticed. Meraki switches support STP/RSTP.   What other branded switches are you using for C2 and D2, do these support STP/RSTP and what speeds are the ports on these switches?   It would be great to also know what interfaces/ports on the switches that you would use for the re-redundant and primary links for each switch.   ... View more

Hello @cisco_Meraki, for 300 devices you'll require 300 SM licenses. 1 SM license allows you to manage 1 device from within Systems Manager.   There is no other hardware or licenses required to be procured to have the ability to use all the enterprise features from Systems Manager, You'll just need to pick whether you want to license the devices for 1, 3, 5 or 10 years.  ... View more

Could be a nice use case to try and up-sell the customer some MV camera's.    - No static settings needed on an APP, just tell them to download the Meraki app and they can access any camera in any location at any time. - No need for a DVR, less hardware, less cost, less management.    Just a few reasons to push the MV range 🙂 ... View more

I've not had any problems, What version of firmware are you running on your MR's?    Do you currently have WPA and WPA2 encryption enabled on the SSID? Wireless>Access Control>Encryption mode, if set to WPA and WPA2, change this to WPA2, save and re-try.   If you're still having problems it's probably best to get on the phone with Meraki support who will be able to help troubleshoot with you in real-time by taking packet captures of the authentication process.  ... View more

 I see. Unfortunately, due to the API limitations with Guest/Meraki auth users, I don't see how that would be done via the API. I'd advise to "make a wish" within your dashboard and also reach out to your Meraki sales rep expressing your desire to have these API features available (It may be in the roadmap which they are aware of!)     ... View more

Haha, I need to pay more attention!   ... View more

Hello @filipego, Looking of the AP documentation (help>API Documentation) it doesn't appear that the ability to update Meraki hosted authenticated users can be updated via the API currently.   My question would be why would you look at doing this via the API, keen to understand your use case for it to see if there could be an alternative architecture?   You can currently configure a Guest Ambassador permission on a Meraki user account which only has rights to add, remove Meraki hosted accounts, have a read of this document - https://documentation.meraki.com/zGeneral_Administration/Managing_Dashboard_Access/Managing_Dashboard_Administrators_and_Permissions   ... View more

The new look and feel its great @CarolineS! I look forward to the release of the community badges!   A few things which I've noticed with the updates to the UI, not too sure if these are all new features however definitely jumping out at me 🙂   The new Cisco Meraki footer on the bottom of the community page with quick links to Meraki blog, developers, jobs, community guidelines, privacy and terms of use, Youtube and Twitter!  The search bar at the top back of the community allowing you to search within all community, blog, users, private messages. Related documentation different thread categories (e.g Security/SD-WAN) thread has a sub-section for related documentation with hyperlinks to the Meraki documentation for relevant help articles. Labels different thread categories (e.g Security/SD-WAN) thread has a sub-section for Labels with hyperlinks to certain tagged threads. The ability to share certain posts/community updates with other social media accounts, i.e the one from you above allows me to share with my LinkedIn, Twitter, Facebook social media accounts at the click of a button! Loving the new look and feel of the new UI 🙂     ... View more

I highly doubt it's AMP causing the WAN link to fail. Could you provide some more information about the problem your experiencing with the WAN link?   The MX100 should have no problems running all services with 100 active clients, If you're skeptical about the load on the unit, call Meraki support who will be able to share the load information with you.   If you're running a newer version of Firmware on the MX, you can find out the load information yourself by going to organization> summary report and then clicking on "view new version". You'll then be able to see the device utilization graph.  ... View more

Are you currently running Advanced Security features on the MX? (Content Filtering, Threat Protection, AMP, IDS/IPS?) Also what version of firmware are you running on the MX?   If possible try disabling them one by one to see which is causing the traffic to be blocked.   You'll have to take a packet capture from the LAN interface of the MX and find out what domains the FTP download is coming from and then add it as a whitelist rule. ... View more

 The operating temperature of devices cannot be seen within the dashboard for any of the Meraki range (MX,MS,MR,MV). This information can not be accessed currently via the API either.   My recommendation would be to "Make a Wish" through the dashboard and to also follow up with your Meraki sales rep if this feature is pending a sales opportunity.   I too would also like this feature and have requested for it. I believe Meraki Support access to this information if you feel a certain device is running a little hot I'd get in touch with them to see if they can help provide you it. ... View more

As earlier comments, you could look at selling the MX400 second-hand. The rest of the gear can be recycled, have a look at the Cisco product Recycling incentive too -  https://www.cisco.com/c/en/us/about/product-innovation-stewardship/product-recycling.html ... View more

How are the two MX's configured? I.e do they plug directly into your ISP's network with Public IP's directly on the WAN interfaces or do they have a ISP modem upstream and have private IP's?   If you're suspecting an issue with the VPN Registry communication, numerous alerts will be generated within your event log of the MX in question. If you're seeing alerts of VPN discconect a lot, this would point to this. I've had this problem in the past and had to engage Meraki support to manually change the registry that the MX was trying to communicate with to stop the problem. ... View more

Not all SFP modules are supported by the Meraki switches, have a read of this article for more information - https://documentation.meraki.com/MS/Other_Topics/MS_Switch_SFP_and_SFP__Overview.   My recommendation would be to first ensure that the SFP is supported and is being recognized by the MS switch.   Get it connect to the Fortigate via an ethernet connection and get it cloud communication. Insert the SFP and see if it's recognized on the dashboard. If not, get in contact with Meraki support and they can have a look at the device for you to see if it's being recognized.    ... View more

Have you tried to bounce the tunnel from the site that isn't working? (Security appliance>Site to Site VPN, turn the type to off, apply changes and then revert back to your desired setting - Spoke or Hub).   Under the Organization>VPN Status page for the site with problems, what does the VPN registry, NAT Type and Encryption messages say? ... View more

I had this on-going problem with one of our MX's. I opened a support case and Meraki support advised that this problem normally arises when the MX is having problems connecting to one of the registries. They manually changed the registry which ours connected to and I then stopped seeing these events in our event log.   I'd advise contacting support so they can do the same for you. ... View more

Nice work @PhilipDAth! I was just thinking, wouldn't it be great if Meraki added a roll-back feature within dashboard natively. I.e You'd make a change to some configuration apply the change, you'd then have a ten minute period to be able to roll back in the case of causing any unforeseen problems.  ... View more

After creating multiple VLANs via the API doesn't it automatically enable the VLAN functionality on the device? ... View more

It sounds like you're getting double tagging happening. I.e Management VLAN being tagged 911 and then a Native VLAN tagging of 911. Try to remove the management VLAN tagging or alternatively use a different Native VLAN.   If this doesn't work take a packet capture on the device connected to the MS to see what VLAN the DHCP discovers are coming from.   ... View more

Thanks, @PhilipDAth, Technically and a viable and achievable solution. however, expensive and the introduction of more MX's means more management overhead and points of failures.   The main point I'm trying to make is that other SD-WAN vendors offer the ability to have more than two WAN ports on their hardware, surely the MX hardware supports the ability and is more of a software limitation?   ... View more

 @BlakeRichardson As pointed out above, probably a limitation from Apple side. I'd make a feature request via Meraki and also via Apple if you have any inroads. ... View more