This blog post explains it quite good: https://www.jiribrejcha.net/2024/01/convert-cisco-meraki-mr-access-point-to-catalyst-dna-mode/ ... View more

Yes, the Meraki cloud authentication uses a username-password based system, which is typically configured with PEAP-MSCHAPv2.   The Meraki cloud server's certificate should be trusted by the client for the authentication process to work correctly. However, certain client devices might get a prompt to trust or ignore validation for the Cisco Meraki certificate they get when connecting to an SSID.   The Meraki Dashboard does not explicitly state a maximum limit for the number of users that can be created for authentication. It's important to note that for each SSID, there's a design limit of 128 clients per radio built into the APs (But I really don't recommend connecting more than 30 clients per radio).   The Meraki cloud authentication can integrate with external identity providers through RADIUS or SAML. For example, it can be configured with Azure AD using SAML.   Yes, the Meraki cloud supports certificate-based authentication such as EAP-TLS. This can be easily deployed to iOS, Android, OS X, and Windows clients using the Systems Manager.   https://documentation.meraki.com/General_Administration/Managing_Dashboard_Access/Configuring_SAML_SSO_with_Azure_AD https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Configuring_EAP-TLS_Wireless_Authentication_with_Systems_Manager_Sentry_Wifi   ... View more

I suspect the question might relate to the Meraki platform itself, in which case:  no - you can’t host a ‘private Meraki Dashboard’ anywhere (in private DC or public cloud platform).  One of the primary benefits of the Meraki solution, for most customers, is that they don’t have to do anything to build and maintain the underlying platform themselves - Meraki does this privately. What’s the reason for wanting to host it yourself (albeit in the cloud)? ... View more

as the other endpoints are working and you're following the published documentation, i think it'd be best to open a case with support     ... View more

Meraki pushes the updates, but they can always be postponed/rescheduled. What we do is always reschedule the updates to a planned maintenance window. ... View more

Yes it does, with the following limitation.   The Meraki MS120 and MS125 series switches do not support Dashboard-based packet captures on network ports connected to other Meraki MS switches within the same Dashboard Network    https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Packet_Capture_Overview#MS_-_Switches ... View more

By the way, Don't go with Meraki management yet, since this is not yet publicly supported. ... View more

Meraki APs have TAM too... ... View more

The same document also says the following   "Expected behavior. If the MX losses connectivity to the VPN registry, peer information gets purged over time but not immediately. Connectivity to the registry matters when a node changes its contact information after losing connectivity to the VPN registry.   Both the hub and spoke will still be able to form the tunnel if the contact information remains the same, and they lost registry connectivity. Peer information will purge after a few hours causing the tunnel to be marked down."   It sounds like there is a timeout where the peer info gets purged and connectivity to the VPN registry is required for the tunnel to remain established. That said, I've never seen this occur.  For the exact length of time the tunnels remain up for, you'd probably need to ask Meraki support. ... View more