The arrow indicates that the interface is being used for the uplink to Dashboard. It is not an indicator of STP status.  ... View more

Correct. If you set the MS to use VLAN 11 for management, it will acquire an IP from VLAN 11 and will tag packets for this traffic.  ... View more

You can set the IP & VLAN (note that if you set a VLAN, the switch will tag packets with this VLAN - so if you want to use the native VLAN, this needs to be blank) via Dashboard or in the local UI on the Uplink tab. Just make sure that what you set in Dashboard is the same as what you set locally on the switch. The Dashboard config will override anything you set locally on the switch.  ... View more

Is the server's firewall configured to allow RDP? When you're connected to the VPN, can you ping the MX? Other servers? Can you ping the IP you get from VPN from the server?  ... View more

Is the server you're trying to connect to in the LAN subnet (192.168.1.0/24)? If not, does the MX have a route to the subnet the server is in and does the server's gateway have a route to the VPN subnet?    You can add a static route in the MX as necessary and do the same on the gateway of the server if it's not the MX.  ... View more

Are you using site-to-site VPN or client VPN? Does the MX64 have a route to the server you are trying to access? Does the server have a route to the VPN subnet you are coming from?    Can you post some screenshots of your MX config? There isn't enough info in your post to help you.  ... View more

@Mr_IT_Guy @BradB Absolutely agree on the need for higher level training/certs that customers have access too. It looks like Masters (technically CMNP?) is being given to both partners and inside SE's now - https://community.meraki.com/t5/Community-Tips-Tricks/Community-profile-badges-the-master-list/td-p/10733 (@MerakiDave when will I see this badge on your profile!?). It'd be very interesting to see this opened up for customers or a modified version.    I think it's now very clear that CMNO is a very, very low level cert. I see lots of people with CMNO certs throughout the community asking questions that should be covered by a cert.  ... View more

Can you post a screenshot of the VLAN/subnet config on the MX?  ... View more

@Jacko Yes, I believe you're required to use Apple Configurator to do a touchless deployment. @jared_f probably has a better handle on that than I do as we simply use an open "enrollment" SSID when setting up iOS devices.  ... View more

I don't believe there is a site to download the cert from, but perhaps @CarolineS or @GeorgeD can assist.  ... View more

@Jacko DEP happens *after* the restore process in the iOS setup. This means you can take a device in any state, wipe it, restore from backup and have DEP applied.    Are you sure you've applied DEP settings in Dashboard to the devices? Does DEP happen if you don't do a restore?  ... View more

@Jacko Do you need to restore the existing data or not? Either way, you need to get the devices into DEP on the Apple side and then assign settings to them in Dashboard.    Once you've done this, you can wipe each device and it will become supervised and get the DEP profile during the setup process. If you want to restore data from iCloud or iTunes you can do that as well - just pick the appropriate option on the restore screen.  ... View more

@Chris_M wrote: Its recommended to provide a use case so they can optimize their development process to fulfill our wishes. This sort of drives me nuts about the Meraki internal feature request process. What is the use case for IPv6 on the MX line (or ANY product line)? IPv6 connectivity is the use case. It's 2018. IPv6 is not new. It's widely available from the ISP side.    Not everything can directly be tied to a specific sale or use case. The MX line is meant to be a modern UTM/firewall appliance... IPv6 should probably be part of the feature set.  ... View more

This matches what I've seen with iOS @jared_f. As long as you have the device entered in DEP and have settings assigned through Dashboard, DEP enrollment will properly happen even after you restore from a backup that was not previously DEP/supervised.    I will note that this does NOT work for Mac's. If you have a Mac that's enrolled in DEP and then you restore an image of that Mac to another Mac that has DEP settings assigned, the second Mac will not be enrolled in DEP.  ... View more

@PhilipDAth I'm confused about your concerns with DEP. We use it with Mac's and iOS devices without ever having them touch Apple Configurator. DEP is a bit of a pain to get the initial enrollment set up with Apple, but then it's very easy to use and implement through Meraki SM.  ... View more

@Chris_M wrote: The main thing is IPv6 is supported on the CIsco platform, its adapting it for the Meraki Dashboard that takes an effort and they haven't informed us of their time/effort on this. Just to be clear - the MX devices don't run IOS.  ... View more

@BHC_RESORTS wrote: @AdamS wrote: Very nice shot, but may I suggest the framing would be better with some MS425's under that ;-). Looks like an HP 5406zl. One of my favorite switch chassis! Now if there was a Meraki switch chassis....wow would that be legit! 5406R without a second management module. I too really like this model and second the request for a Meraki chassis switch.    I do have some MS425's as well since @AdamS mentioned it...            ... View more

@Mr_IT_Guy @BHC_RESORTS I see your dual MX600’s and raise dual MX450’s.    ... View more

Crafty is right @MerakiDave! Sometimes they're so crafty they end up on non-native VLAN's just to mess with you.  ... View more

Only two ports are supported as WAN interfaces. I don't believe any of the MX models support more than two WAN interfaces.  ... View more