I completely agree with you. It would be highly beneficial to have a pre-production environment that replicates the production environment, allowing us to thoroughly test our configurations and pipelines. ... View more

Hello,   Regarding your query, here's a breakdown:   Option 1 is recommended If your priority is simplicity and your use case is straightforward, and it provides a more streamlined approach with fewer rules. Option 2 is recommended if you require more granular control over different subnets and ports or if your security policy necessitates distinct treatment for each combination. It allows for a more detailed and specific rule set tailored to specific scenarios.   The optimal choice depends on the specific security policies and requirements of your network. Please let me know if this information addresses your question. ... View more

Hello,   I believe you are seeking documentation on the creation of switch port profiles and the assignment of these profiles to specific switches:   Switch port profile: https://developer.cisco.com/meraki/api/get-organization-config-template-switch-profiles/   Assignment of the profile: https://developer.cisco.com/meraki/api/update-device/   Please let me know if the information I provided aligns with what you are looking for.     ... View more

Hello,   SD-WAN Policies : https://developer.cisco.com/meraki/api/get-network-appliance-traffic-shaping Threat Protection : I'm unsure if we have existing endpoints for threat protection ... View more

Could you please provide additional information regarding the deployed topology? How the AWS and the SRX are connected ? ... View more

Anytime 😜 ... View more

  Yes, WAN1 is the primary LAN interface for both the Meraki Switch (MS) and Meraki AP  (MR). Here's an example of the body request that I used to push in my requests: { "wan1": { "usingStaticIp": true, "staticIp": "10.{{XX}}.{{YY}}.250", "staticSubnetMask": "255.255.255.224", "staticGatewayIp": "10.{{XX}}.{{YY}}.254", "staticDns": ["8.8.8.8", "8.8.4.4"], "vlan": {{ZZ}} } } This setup uses a static IP address, subnet mask, gateway IP, and DNS servers, with a VLAN of ZZ for network segmentation. ... View more

Hi, try this JavaScript test script in Postman:   // Test if the response status code is 200 pm.test("Response status code is 200", function () { pm.response.to.have.status(200); }); // Test and filter the response based on product type and isBoundToConfigTemplate pm.test("Filters the JSON response data to find networks with the 'wireless' product type that are not bound to a configuration template", function () { // Parse the JSON response data var jsonData = pm.response.json(); // Filter the array of networks based on specified conditions var filteredNetworks = jsonData.filter(function (network) { return network.productTypes.includes('wireless') && network.isBoundToConfigTemplate === false; }); // Assert that the filteredNetworks array is not empty pm.expect(filteredNetworks).to.be.an('array').and.not.empty; // Store the filteredNetworks array in the environment as a JSON string pm.environment.set('filteredNetworks', JSON.stringify(filteredNetworks)); });   This Postman test script validates an API response: 1. It checks if the response status code is 200. 2. It filters the JSON response data to find networks with the 'wireless' product type that are not bound to a configuration template. 3. The filtered network array is asserted to be non-empty, and the result is stored in the environment as a JSON string for further use.   Make sure that you have created an environment in Postman.   Feel free to ask! ... View more

The JSON objects you provided seem to be correctly formatted, and there are no obvious syntax errors or missing commas.   The issue might be related to how the input data is being passed to the script, or how the script reads the input file?   Ensure that the update_input.txt file is saved with the proper encoding, such as UTF-8. You can check and change the encoding in Visual Studio Code by clicking on the "File" menu, then "Save with Encoding," and select "UTF-8" if it's not already set.   Otherwise, I reviewed the function loadruleset (responsible for loading a ruleset from a file and returning it as a list of JSON objects (rules)) catches any exceptions that occur during JSON parsing using a general except block so try to add some print statements to debug the function and check the values of p_filepath, buffer, jdump and the detailed exception at different stages to see if they match your expectations.   Let me knew If the issues persist! ... View more

Absolutely, interface bandwidth cannot exceed the maximum throughput of the MX ... View more

Hello,   After conducting thorough research, I have discovered an additional API call that retrieves uplink configurations of an MX device. This particular call can be made using the endpoint.   /devices/{serial}/appliance/uplinks/settings   However, I noticed that the response from this call does not include the provisioned bandwidth settings. It appears that the provisioned bandwidth might be a fixed value depending on the interface type. For example, in the case of an MX67 device, all of its interfaces are RJ45 ports, allowing them to achieve a maximum bandwidth of 1G.   ... View more

Hello,   From the docs, it appears that the requested feature does not currently exist yet. The correct syntax for this feature is as follows: { "mode": "<string>", "hubs": [ { "hubId": "<string>", "useDefaultRoute": "<boolean>" }, { "hubId": "<string>", "useDefaultRoute": "<boolean>" } ], "subnets": [ { "localSubnet": "<string>", "useVpn": "<boolean>" }, { "localSubnet": "<string>", "useVpn": "<boolean>" } ] }    @John_on_API, I believe this request could potentially be a proposal for new endpoint? ... View more

All the very best for your all 💯 ... View more

Hello,   The statement "Each Meraki organization is allocated a call budget of 10 requests per second" implies that within the Meraki platform, every organization has a maximum allowance of 10 API requests per second, without considering the source IP or agent.   To further elaborate, if each Meraki organization is granted a call budget of 10 requests per second, we can divide the requests evenly within intervals of 100 milliseconds (0.1 seconds). By doing so, we can determine the number of requests that can be made within that specific timeframe.   I usually conduct a Postman runner test with numerous requests, where I followed the practice of separating each request by a 100-millisecond or greater interval, and it worked flawlessly.   Please it's me knew if this information answers your question? ... View more

Hello,   Currently, the dashboard lacks an auto-refresh feature in multiple areas, resulting in pages that do not automatically update their information, necessitating manual refreshing. For instance, even a basic task like updating a device's name requires manually refreshing the page to observe the changes.   However, it is worth mentioning that in my limited experience with the MX appliances and MS, certain elements like the port status and the HA status are automatically refreshed ... View more

Hello,   I think this request doesn't exist in the Meraki API (https://developer.cisco.com/meraki/api-latest/). There's already a tool available for backing up and restoring networks, which can come to your rescue. You can find this tool on the DevNet Exchange Hub. Just follow this link: https://developer.cisco.com/codeexchange/github/repo/gve-sw/meraki-config-manager.   Please let me know if this suggestion resolves your issue!   ... View more

You're welcome, let me knew if this resolve your issue? ... View more

Hello,   To add multiple subnets behind a FortiGate device in a Meraki site-to-site IPsec VPN configuration, you need to make some changes in both the Meraki Dashboard and the FortiGate configuration. Here are the general steps you can follow:   - Log in to the Meraki Dashboard (dashboard.meraki.com) and navigate to the organization and network where the VPN is configured. - Go to the "Security & SD-WAN" section and select "Site-to-site VPN" from the left menu. - Locate the existing VPN connection with the FortiGate and click on its name to edit the settings. - In the "Remote Subnets" section, add the additional subnets that are behind the FortiGate. Enter the subnet IP and subnet mask for each subnet you want to include. These subnets should match the ones you added in the FortiGate configuration. - Save the changes.   Example below:     ... View more

All the very best for you all ! ... View more

Hello,   I think, the most effective approach would involve using API calls to extract group policies and VLAN settings in JSON format and subsequently applying them to the destination network. Alternatively, otherwise, you can submit an issue on the Meraki automation scripts repository: https://github.com/meraki/automation-scripts.      ... View more