Do you have intune licenses?     If so you can configure intune to auto enroll for Azure AD joined machines.  Then you can configure the certificate connector in intune to connect on prem, you then have your on prem certificate server issues certs via Intune policy (you can also trust your on prem CA with intune - no need to pay for a cert if you have control of the devices), you can then use certs for your Radius Auth.   The client does not need to be Hybrid joined or exist in local AD (although the user needs to of course), or even connected to the LAN at the time of cert issue. ... View more

You're not alone, I have a bug that's been open for more than 12 months.  Apparently, it is being treated as a priority (after I escalated through our account manager etc.), it still doesn't even have an engineer assigned and each month they say...   "This issue is being treated with a high priority but does not currently have an engineer assigned."   We're running nearly 200 APs, so whilst not massive we're still a decent size, however at this rate by the time they resolve the bug I will have replaced Meraki with another vendor.   One of the reasons we went with Meraki was the direct support but this (and other examples I've experienced) show that it can be pretty poor. ... View more

Although it’s not perfect (e.g. breaking RADIUS accounting) ... View more

Meraki support can pin firmware versions to specific APs so you can run different firmware on APs in the same network. ... View more

Yes, to the beta firmware. Just be aware to read the release notes in case the beta introduces other problems. We are running the beta, but have an open Meraki ticket as there is a bug with radius accounting messages but it’s better than not having clients connect to the APs. ... View more

Are they MR33's?  We had this issue when we added some MR33's, you have to use the latest beta to resolve it.  Certainly, at the time (a few weeks ago) the current stable didn't actually support an MR33. ... View more

What about a very simple bridged Network onto the same VLAN as a wired client. Test, assuming it works start adding back in your settings until it stops working. Are you sure there’s no firewall causing an issue? ... View more

Can you set up a test SSID, same settings but run it in bridged mode and see if that resolves the issue. ... View more

Ok, let us know how you get on. ... View more

I assume you have also check the L3 rules? Have you check the flow logs/syslog to see if that shows anything? ... View more

Have you tried removing the rule to see if that resolves the issue? ... View more