We tried MST as well and as soon as one switch was up on MST the other switches would cause it to stop forwarding traffic. We did try shutting down the entire network, bring up a switch at a time configuring MST. We brought up a second switch and were able to convert to MST. We brought up a THIRD switch and before we could configure it, the other two switches went down. It seems the only way to get MST configured on a large network would be to bring up a switch at a time - convert it - shut it down and then move to the next switch.   Not sure we are going to try that as this location has 19 IDFs and if it didn't work...   We have the following on our Cisco 2960x switches spanning-tree mode rapid-pvst spanning-tree loopguard default spanning-tree portfast edge default spanning-tree portfast edge bpduguard default no spanning-tree optimize bpdu transmission spanning-tree extend system-id spanning-tree backbonefast   What should we set our Meraki Trunks to?   Options are - Disabled - Root guard - BPDU Guard - Loop Guard   I'm asking because I have been in networking for 30 years but never had to really address spanning tree as we have been 100% standard Cisco and the core always won the contest for root spanning-tree vlan 1-4094 priority 61440 ... View more

I opened a case with Meraki. What was happening was I was not getting the blue button that says FINISH EDITING. If I created a rule the button was not showing up. Working with TAC we found that if I went to the page and then refreshed the page the button showed up but for new sites with new rules I was having an issue.   After trying Firefox I did not have the same issue. Chrome was not always giving me the button. could have been my security settings.   So - be sure you get the FINISH EDITING button - and then click on save.   I am going to try again with objects. Otherwise too many IP addresses to have to type in. ... View more

Word of warning! I am setting up a new SD-WAN using the MX appliances. I enabled the groups and thought this was great. I get to save lots of typing and make it more readable.   Well then I have several MX appliances setup with just IP addresses and a couple with groups. Everything was working fine - until I deleted an object under Organization --> Network Objects. I then went to the firewall on a MX I was setting up. I have made a number of rules and saved without issues - until I tried to replace one object with the newly created one. When I went to add another route and came back to the firewall rules - they were all gone and back to the allow all rule.   I checked other MX appliances I was setting up - the ones with IP addresses used in configuration were fine. the ones with objects were not.   So enable objects carefully! ... View more

Thanks for the reply and yes BETA makes me a tad nervous. ... View more

I am trying to make them as secure as possible. I agree that they could easily be kept "inside" the network but a management goal is to remove all devices that Cisco stops providing software updates for. I am hoping that removing all functionality other than voice requirements and putting them on the other side of a firewall will to convince management they are "safe" for a few more years - at least until we move to SIP or replace with much less expensive routers. I don't think many people are trying to hack in through  B1 lines anymore and we need them for 911.   I would like to hear from others that are keeping 2900 routers to help build my case so I can move to Meraki sooner.   Thanks for the response.  ... View more