@amacaya , your original case may not be related to the outage here, but it will likely be impacted throughout today.   Please continue to work with our Support team to continue investigating what the root cause would be.    Many thanks.   Giac Meraki Support ... View more

@Maurice_Fellay , it would very much be subject to when they rekeyed last.   The issues has surfaced around 2:00 PM BST   Many thanks.    Giac Meraki Support ... View more

@Maurice_Fellay @Dromero , VPNs on some nodes have also been impacted. Tunnelled SSIDs and Non-Meraki tunnels would be subjected to the outage.   Existing tunnels should continue to operate normally. If they are not, I'd recommend opening a case so we can verify.    @Ayala , yes, most likely. The MR will not be able to receive the configuration from the Cloud and is therefore unlikely to come online on Dashboard.  ... View more

Hey @Techbull ,  The SSID availability is pushed from Cloud , so it is going to be impacted by the outage at this moment.   Thank you for adding it here!   Giac Meraki Support ... View more

Thank you for pointing it out @blrh , rectified.     ... View more

Hey @itxpt ,   We hear you loud and clear. We have dedicated all the resources to get this resolved and it is treated with the outmost urgency.    I look forward to get you all some good news as soon as possible.   Giac Meraki Support   ... View more

Hello @abdunin ,   I hear you and passed the feedback to our Dashboard team.    Thank you for your patience.   Giac Meraki Support ... View more

Hey @sixgigdan ,    Not yet unfortunately, but we have multiple teams assisting to resolve this as soon as possible.    A root cause has been identified and we are currently working on a fix.   I hear your feedback with the Status page and will ensure I raise it up.   Many thanks for your patience everyone.   Giac Meraki Support ... View more

Hey folks,   @webmanaus I think I understand what you are trying to achieve. In my experience with other vendors, I have observed the same behaviour; my gut reaction here is, why would you want an internal client to go through the LAN of the MX, being filtered, shaped, routed, NATted, fragmented, go out of the WAN and be back in the WAN to then be filtered, shaped, routed, NATted, reassembled, to go back into the LAN? 😛  In your situation, if you have a DNS server internally, I'd actually create an entry for the server that resolves locally, so you also don't have to modify every single host file out there. If you don't have an internal DNS, I'd consider Cisco Umbrella, as you can do this kind of split DNS resolution with a cloud managed platform.   @phelpsa06 at the moment this is not possible with the MX. There is a source NAT feature in development, so this should eventually appear in one of the future firmware releases, but that's not available just yet.    Hope this helps!   Giac   ... View more

Hey Grillface! I'm not sure if I understood your objective properly here, but I'll try and break the question down. The Allowed Remote IPs field is sort of an access list. The only purpose is to restrict which IP addresses can make use of the NAT rule you created. The following is an example of a valid configuration, that would allow only 1.1.1.2 to use 1.1.1.1:12345 to access 192.168.0.52:54321 If I was instead coming from 2.2.2.2, the Allowed remote IPs list would stop me from accessing the server. In terms of what you can put in that field, we would allow any IP address or range, but remember that the MX would evaluate this from its WAN's perspective. Traffic from the LAN would never be inbound on the WAN, therefore having your LAN in the Allowed remote IPs would not have any effect; in other words, if you took a packet capture on the WAN, you would never see a packet with a 192.168.0.X address in the source (unless you have an MPLS), so the Allowed remote IPs rule would never kick in.    On the second part of your question, am I understanding it right that what you are trying to achieve is NAT subnet A onto Public IP A, for it to then talk via Public IP B to subnet B (using the 1:Many NAT)?   Many thanks! Giacomo   ... View more

Awesome job everybody! Keep up the great work, as you are all totally awesome! 🙂  ... View more

Hey guys,   Just to chime in, make sure you first bring the unit online via a wired internet connection as it will need to download some firmware and configuration.   Once it's up and running the first time, you should be able to use the cellular.    As you rightfully mentioned, in some instances you might want to ask your provider for the APNS and set it accordingly on the Appliance status page.   Thanks!   Giacomo ... View more

Late to the party, but well done guys! Really appreciate all your help in reducing my day to day workload! 😜    G ... View more

Hi @TimBisel,   I will echo @nwu1 response, and I would recommend to follow the article to troubleshoot this too.    There is, however, another action you might want to take to understand if there is a break in the communication between the two sites: you can navigate in Security appliance > Traffic shaping  and set up an Uplink statistic with destination the public IP address of the remote Meraki MX.  You can then see the information from Security Appliance > Appliance status > Uplink and this would greatly help you to understand if there's any drop occurring over the WAN or if the issue is just on the VPN tunnel.   If you see frequent disconnections on the event log to the VPN registry, give us a call as we might be able to take some remediation steps.   Thanks!   Giacomo ... View more

Hey guys,   We had another couple of cases regarding this issue. It seems that there's different solutions to this depending on the circumstances. The last case I'm aware about, Cisco TAC was involved and they confirmed a bug on the ASA with Id CSCso70269 .    I would suggest to cast an eye on it and try the same commands to see if you are hitting that bug too.   Hope this helps!   Giacomo ... View more

Hey all,   You can find complete SFP compatibility on this page: https://meraki.cisco.com/lib/pdf/meraki_datasheet_sfp.pdf   On the right hand we have marked the models compatible with each SFP type.   Hope this helps.   Giacomo ... View more

Hey @rinat,   ***Theoretically*** any power supply with the correct connector and power ratings would work ***But*** we wouldn't be able to support you if anything breaks.   I would personally avoid taking the risk and get in touch with an authorised reseller as per @PhilipDAth 's link. I'm sure they'll be able to sort you.   Thanks!   Giacomo ... View more

Hey @ZDonaldson,   I'm with @jdsilva on this one. I think in your case you would be better off having the WiFi network separate from the rest (you can do a Split network by selecting your combined in the Organization > Overview page)  and you can then assign Administrative rights for the relevant accounts to just that network.    Let us know if this works for you. 🙂   Giacomo ... View more

Hey @franfm,   In addition to @ww link, you can also disable the local status page from the Dashboard by going into Network-Wide > General > Device Configuration.    This helps prevent users accidentally (or intentionally!) trying to access the local status page.   Giacomo ... View more

Hey guys,     Just jumping in to say that, assuming the issue is related to the anti-replay value as @OHTorx is advising,you should be able to change the anti-replay window size on the ASA side: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_dplane/configuration/15-mt/sec-ipsec-data-plane-15-mt-book/sec-ipsec-antireplay.pdf   Hopefully this might be a less disruptive test than a firmware upgrade .    Keep in mind that the 15.X release is currently on unreleased Beta and we are using it for customers who face particular issues that are resolved in that specific release, which is why you are unable to schedule upgrades to it manually.     Hope this helps.   Giacomo ... View more

Hey @Mike3 and everyone,   You can find detailed information on the licensing on this page: https://documentation.meraki.com/zGeneral_Administration/Licensing/Cisco_Meraki_Licensing_Guidelines_and_Limitations   In Mike's current situation (and similar if any of you has experienced or will experience it) there's a lot of legal stuff involved, including the much dreaded GDPR. On the end customer agreement we specify that the customer is solely responsible for maintaining access and this is there to ensure the confidentiality of your network.    Ultimately, Meraki support lacks the tools and the authority to make any change to the Administrators of an Organization, so we would normally advise that you will have to attempt and retrieve access to an Admin account with any means necessary.   You can also refer to this page for our best practice advices: https://documentation.meraki.com/zGeneral_Administration/Managing_Dashboard_Access/Managing_Dashboard_Administrators_and_Permissions#Policy_and_Best_Practices_for_Organization_Management   Hope this helps! Giacomo ... View more