@tantony I'm having the same timeout issue. What permissions did you need to add to your AD user? I was thinking a plain domain user would be enough ... View more

Thanks, I do prefer a physical MX like I have now, but just wanted to know the virtual MX instance works. ... View more

Thanks, that's what I thought, but I guess better safe than sorry. ... View more

if you can nslookup the server by specifying your dns server(nslookup DestIPaddress DNSIPaddress) ,then this is the solution that works best for me:   https://www.reddit.com/r/meraki/comments/arkviy/client_vpn_and_local_dns/ We had this problem with some Win10 clients, and the only workaround we've found so far is to statically set the Interface Metric value on the VPN adapter to a lower number than the local adapter, so that it uses the DNS server set on the VPN interface for name lookups. If there's a better way to handle this, I'd love to hear it.   This is under the vpn adapter networking IPV4 properties advanced options. Turn off IPV6 there as well. ... View more

https://www.youtube.com/watch?v=qqcC1aiGj0s ... View more

If it is only employees then I'd say it isn't a major issue, but if it is the public then it would be better to disable it unless you need it. ... View more

I guess the best you can say about NPS and Azure MFA is that it's "free" in its most basic form. Whenever you really want tio achieve something, MS urges you to buy something on top. At that point of time latest, please take a look at how things are being handled in the MS universe related to Cisco Duo. Perhaps there are folks out there who're brainwahsed enough to like the Azure MFA, Defender etc. Duo pleases with wonderful simplicity. Exactly like Meraki does. 😉 ... View more

> Windows Hello for Business does support MFA, in that it takes 2 factors to set it up.     If uses MFA for device enrollment.   Beyond that, it does not use MFA.  For example, you can not protect a Windows 10 workstation using Microsoft Authenticator - a second authentication source. Allowing only a single authentication method - such as PIN - is not two-factor authentication.  It is no better than a password, and in many cases worse, since a PIN is typically weaker than a password. ... View more

Happy Birthday!!!   ... View more

It has come back up for me now.  It must be transient issues and it has happened a couple of times now. ... View more

Love to hear if anyone is using 802.1X on their network also. ... View more

Please see this Cisco solutions document including case studies of mining installations: https://www.cisco.com/c/en/us/td/docs/solutions/Verticals/Industrial_Automation/IA_Verticals/Mining/Mining1_5/IA-Mining-DG/IA-Mining-DG.html ... View more

Congrats to all the winners and well done to everyone who participated! ... View more

@KarstenI  Thank you  ... View more

@Ryan_Miles   The only time I only had single VLANs was may be years ago when It was out of the box. May be I didn't notice VLAN 0 before, but I only noticed it after adding VLAN 10.  I had VLANs 2-4 a long time ago and I don't recall ever seeing a VLAN 0 ... View more

https://www.arin.net/reference/research/statistics/address_filters/   May be this is the reason: In August 2012, ARIN began allocating “172” address space to internet service, wireless, and content providers. There have been reports from the community that many network operators are denying access to devices having IP addresses from within the entire 172 /8 range. As a result, any device with a 172.x.x.x IP address may have difficulty reaching some sites on the global Internet. The only way to solve this problem is for those operators to reconfigure their routers or firewall access controls and filter only address space from the 172.16.0.0/12 range. ... View more

@Nash  Sorry I never got back to you I disappeared into hospital(again) contemporaneously with your post, and it slipped between the lines, as it were. ... View more

Completely dependent on the network device. Most of them will query the first RADIUS server and fall back to the second one in case the first is not reachable / takes too long to answer.   If you want load sharing, you'd stick to an external load balancer. ... View more

I only had issue with this user.  These are the things I tried, I'm not sure which one fixed it.  He was able to login to the VPN from iPhone or iPad, but not from a Windows device.  So I assumed it was a Windows problem. Manually created the user profile in RADIUS server Logged in as the user while signed in as Administrator (ran notepad as the user) on the RADIUS serve I'm not sure if any of these was the solution, but when I did these steps above, he was able to login from his Windows ... View more

Would make sense: you won‘t notice any traffic interruptions even when your Meraki device is not able to reach the Dashboard. Well, sort of, but definitely not for such a small time frame.   Further info here: https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Behavior_during_Connection_Loss_to_Cisco_Meraki_Cloud ... View more

hope this helps   https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/VoIP_on_Cisco_Meraki%3A_F.A.Q._and_Troubleshooting_Tips ... View more

More than likely your ISP if the device suddenly unregisters and alerts. ... View more

Thanks for the reply ... View more

@BrandonS    Thanks, I didn't bother to check there.  But good to know, thanks ... View more