Updated: 98.197.21.76/32 98.197.26.56/32 141.98.11.79/32 149.50.116.115/32 185.224.128.74/32 193.177.182.40/32 80.94.95.45/32 185.16.39.29/32 69.69.69.69/32 98.50.117.73/32 98.50.117.56/32 98.50.117.57/32 70.70.70.70/32 198.100.150.85/32 98.27.28.1/32 69.69.69.70/32 98.27.12.6/32 98.27.28.26/32 98.27.28.34/32 98.27.28.31/32 87.120.166.70/32 87.120.166.69/32 87.120.166.231/32 98.50.117.71/32 87.120.166.201/32 80.75.212.46/32 193.111.248.54/32 74.74.74.74/32 89.187.185.81/32 ... View more

Go to the MX100's local status page and check that the LAN port hasn't been forced to 100Mb, as opposed to being on autonegotiate, this would cause these problems.  ... View more

The Non-Meraki VPN tunnel will only be established between the Active WAN interface and the configured non-Meraki VPN peer. Typically, the WAN1 interface is the Primary interface, and assuming it is up, it will be considered the active interface, and the Non-Meraki VPN tunnel will be established over WAN 1 only (Port 3) and not WAN2 (Port 4). The MX will try to establish the VPN tunnel to the Non-Meraki Peer if WAN1 fails or if WAN2 is the Primary connection. You can change which WAN interface is the Primary interface on the "Security & SD-WAN > Configure > SD-WAN & Traffic Shaping" Page.  ... View more

Access Control for VPN connections is handled via IP addresses or subnets, not MAC Addresses.   That said, you can use MAC-based access control to restrict access to the Local Network included in AutoVPN. If not allowed, the client will be blocked at the local network level and prevented from accessing anything.  https://documentation.meraki.com/MX/Access_Control_and_Splash_Page/MX_Access_Policies_(802.1X)   https://documentation.meraki.com/MS/Access_Control/Configuring_Microsoft_NPS_for_MAC-Based_RADIUS_-_MS_Switches   ... View more

This can be caused by AMP's inability to connect to AMP cloud. This will cause all AMP inspected file downloads to be blocked unless AMP is manually disabled.   Most likely culprit is a firewall issue, or a DNS issue preventing the MX from resolving AMP Cloud hostnames.      ... View more