When you are pinging the AP's from your infrastructure you are not testing client experience but rather the management plane connection speed between the AP and your monitoring system.  As @cmr has mentioned, the AP could be busy and be a little slow to respond to ICMP echoes.   Things you should be monitoring are the following: Channel airtime AP CPU and RAM Client RSSI/SNR Average client onboarding experience Average client frame latency and drops. Channel airtime can be viewed from dashboard and is maybe available via the API, not sure. Onboarding expierence can be vewed per AP or per client. RSSI/SNR can be viewed in client view or by going to the AP and viewing the currently connected clients. Average frame latency and drops can be viewed from the RF spectrum page. You can also have thousandeyes integration with your managed clients to see their wireless experience over time. ... View more

The MX85 has a max rate of 1 Gbps without advanced security features.  This is the TOTAL amount of traffic it can pass per second.  This includes traffic going to and coming from the ISP's, VPN tunnels and your interVLAN routing.  Add IPS in the mix and this will drop to 500 Mbps maximum. You could of course start playing with the IPS  trusted traffic exclusions but I haven't tested the behavior in internal traffic going to internal. If you have alot of east west traffic you need to consider in your design if you can have a firewall that can handle the load within budget or if you will have to move your heaving routing to the switches instead.  This negates DPI and makes policies a bit harder but that needs to be designed properly. ... View more

Yes ,I have opend a CASE and  meraki confirmed this was caused by the firmware crash unfortunately they did not addressed the route cause for it therefor there is no solution now .    I am sad for the ability for the meraki team. ... View more

As said above, you're correct - you cannot source specific IP's or subnets. It is per-VLAN   "Source-Based Default Routing is a per-VLAN default route feature." Source Based Default Routing - Cisco Meraki Documentation ... View more

Routing is not port-based but rather source and destination-based, meaning it is not possible to do what you want. ... View more

We are using CW-ANT-O1-NS for CW9163E ,that makes sense for me. I really appreciated your detailed explaination . ... View more