I think then we configure a round robin instead strict order ... Atleast one of radius server should be able to authenticate the client request. It will reduce the impact ..  ... View more

clients are unable to reach the DHCP server or DHCP server is not responding to the request. If there is no dhcp response , client will get 0.0.0.0 ip address. ... View more

Take Meraki support in the call and do a packet capture on the VPN interface to see the ingress and egress traffic to Meraki authentication. I think Meraki support also has access to backend logs to see whether the authentication is reaching the server.  ... View more

One more way to do it, create a group policy for client machine to disconnect the AnyConnect VPN during the timeframe. ... View more

You can give create a SSID Manager - one of the admin role, so they can enable and disable the SSID.  But they will get access on configuration part of SSID as well.  ... View more