Might be good to add the below when a CU is using NAT Traversal: Ports used for IPsec tunneling: Source UDP port range 32768-61000 Destination UDP port range 32768-61000 ... View more

We upgraded to 14.33.1 back in September, since then (touch wood) we have had no issues. ... View more

If the root of your network is a Cisco device running RPVST, and the Meraki devices are at the edge of the spanning-tree then there is a fair chance you'll get it working without having to implement MST, or anything else special - the Cisco switches transmit a standards based BPDU as well as the Cisco proprietary BPDUs. Any issues mainly occur if a Cisco device isn't the spanning-tree root, or if you're expecting to 'hop' across a non-Cisco device, e.g. Cisco <-> Meraki <-> Cisco.    If your Cisco switches are root then you need to drop your priority on them to closer to 0, e.g. 8192, 4096, or even 0 itself. As default the Meraki devices use a default STP priority of 32768 (which I believe is what Cisco use), so if you have your root set at 61440 then its really unlikely it will actually ever be your root. ... View more

I opened a case with Meraki. What was happening was I was not getting the blue button that says FINISH EDITING. If I created a rule the button was not showing up. Working with TAC we found that if I went to the page and then refreshed the page the button showed up but for new sites with new rules I was having an issue.   After trying Firefox I did not have the same issue. Chrome was not always giving me the button. could have been my security settings.   So - be sure you get the FINISH EDITING button - and then click on save.   I am going to try again with objects. Otherwise too many IP addresses to have to type in. ... View more

I am trying to make them as secure as possible. I agree that they could easily be kept "inside" the network but a management goal is to remove all devices that Cisco stops providing software updates for. I am hoping that removing all functionality other than voice requirements and putting them on the other side of a firewall will to convince management they are "safe" for a few more years - at least until we move to SIP or replace with much less expensive routers. I don't think many people are trying to hack in through  B1 lines anymore and we need them for 911.   I would like to hear from others that are keeping 2900 routers to help build my case so I can move to Meraki sooner.   Thanks for the response.  ... View more