Morning everyone. I'm seeing some weirdness with DHCP Relay. We have a Cisco 4331 router connected to Meraki MS210-48P switches running firmware version 15.18. The 4331 router handles all of the layer 3 functions for the network, and has two subinterfaces configured - one for VLAN 1 (0/0/1.10) and one for VLAN 40 (0/0/1.40). The VLAN 40 subinterface has ip helper-address 10.0.10.7 pointing to the domain controller, which handles DHCP for both subnets.   The problem is clients in VLAN 40 are not getting an IP address.   The screenshot below was captured on the DHCP Servers & ARP page under Switching. It gives me the impression that the DHCP server is offering an IP address to the client, but it appears that the client never receives that offer, and ultimately times-out with a message stating that the DHCP server could not be found.     The 4331 is forwarding the DHCP messages to the server, but the responses are not making it back to the client.   Has anyone experienced this issue? Is Layer 3 Routing required for Meraki switches to properly handle the DHCP relay? (I would think the switches are simply receiving a unicast message destined for the domain controller from the router due to the DHCP relay config and no special configuration would be required on the switches to simply pass the traffic out of the correct port to the domain controller)   Thanks!   Twitch       ... View more

Good morning. A while back our MX updated to version 17.10.2 firmware, which came with changes to Content Filtering categories. Accepting those changes and the firmware upgrade effectively broke web browsing and WiFi Calling for several of our sites. We had to get support to downgrade the firmware in order to restore browsing. Once the MX was back on version 16.16 everything began working again.   This morning I went to make a change to Content Filtering, and the Review Suggestions notice is back and I cannot get past it. The MX is still on version 16.16, but I do not want to accept these changes to Content Filtering given what happened less than a month ago. The problem, though, is the only option seems to be clicking on Confirm Changes to accept the new categories - there is no option to Cancel or click X to close this window. So, the Dashboard has effectively hijacked my ability to make the changes I need to make unless I put our operations at risk. This seems just a tad ridiculous to me.   Is there any way to close this window without making any unwanted and unneeded changes?   Thanks!   Twitch     ... View more

Hello to the Crew -   I just enabled a syslog server for URL logging on our MX. The entries are reaching their destination successfully, but we noticed that the log entries do not include the corresponding username associated with the entry - instead of the username the entry just lists UNKNOWN. See below:     Is it possible to have the usernames included with the log entries when they are sent to the syslog server natively by the MX, or will a third-party tool be needed the get that information? I do not see any options to modify what is included/excluded with URL logging except selecting URLs from the syslog entry drop-down menu. I should note that we are hoping to gather URL log information for both wired and wireless clients.   Thoughts?   Thanks!   Twitch ... View more

So I just switched to the new version of the Meraki dashboard. Can I get some free Meraki sunglasses to go with it? Waaaaaay too much white, and not enough contrast to separate the sections or save my retinas.   The pages are painful to look at it.   Please, either add some contrast or add an option for dark mode, or ship me some Meraki-branded sunglasses.   Thanks.   Twitch ... View more

Hello to the Crew - question for you:   We have a non-Meraki Peer VPN between our office and our parent company. While the VPN terminates MX to MX, right now we are different organizations so the tunnel has to be a non-Meraki peer setup.   As long as we don't make any changes to the subnets configured on both ends, the VPN works great. If, however, if we add or remove a remote private subnet from either end of the config, the VPN quits working. The only way to restore functionality is to completely rip-out the config on both ends and put it back.   It seems like IPSec gets hosed and the traffic just stops transiting the VPN once a change is made. Naturally, recreating the tunnels on both ends reestablishes IPSec and the tunnel works fine once again after that.   Has anyone else seem a similar behavior? Is there a fix or workaround? I am not aware of any way to "pause" the VPN, make the required changes, and then start it up again.   Thanks!   Twitch ... View more

Hey gang - We are considering replacing a Cisco 4331 router with an MS-250 switch setup to run L3 switching and OSPF. Our VPLS setup currently runs an IOS router at each remote site as well as here at our data center. The VPLS endpoints all use 172.16.50.x/24, and all of the routers are running OSPF in backbone area 0.   In order to put the L3 switch in place, I need to configure an SVI and assign a VLAN number. My question is this: Will the remote sites give a a flying fig about what the VLAN # is since the interconnection between sites runs at L3 with OSPF and not VLANs (our circuits strip VLAN tags anyway)? In other words, will the VLAN # assigned to the SVI on the switch here at the data center simply be a local construct that only the local switch cares about? It would seem to me that as long as 172.16.50.1 and 172.16.50.2, etc, are reachable over the VPLS via OSPF, then the local VLAN number associated with the SVI should not matter to the remote sites.   Is my assumption correct?   Thanks!   Twitch ... View more

Hello to the crew - I am trying to get an OSPF neighbor relationship to form between our switch stack and an MS-250 switch with OSPF and L3 Switching enabled. The switch stack is running OSPF already, and has a neighbor relationship with some IOS routers.The single switch is connected via Ethernet directly to the switch stack.   However, I cannot get the neighbor relationship to form between the single MS-250 and the switch stack. Note that the stack and the single switch are both in Area 0 with all timers set to their defaults. An SVI is configured on the single switch. The switch ports are both trunks.    It's Monday. I'm tired. I don't think the coffee is strong enough. I must be missing something simple.   Thanks.   Twitch ... View more