On a personal mission to figure this out.   It's not the Active Directory Device GUID, but its something like that.  The MDNS advertised GUID is not what shows up in the console.  Not sure if its encoded, encrypted, or just random.   What I do know is if you resolve the computer name with .local   the name magically updates in the Meraki Console, and they seem to stay that way so far.   If the names stick I'll look a scripting it up as a one off update.      I'm sure this is a local subnet fix only, but using it to narrow down how Meraki is updating the names.  Sharing in case it jogs ideas from the group or you see something in the traces I'm missing.    Steps to get names to update on console for testing: 1). From the clients page of your local network, get the IP address of a client with a gobbledygookname. 2). NSLOOKUP the IP to get the AD Computer name         nslookup 172.22.22.132            Name: Computer1.yourdomain.com           Address: 172.22.22.132  3) Use the powershell command resolve-dnsname to lookup name with .local appended (without your domain).         resolve-dnsname Computer1.local       Name Type TTL Section IPAddress     ---- ---- --- ------- ---------     Computer1.local AAAA 60 Answer fe80:8EC1f5:351D:ABF3     Computer1.local A 60 Answer 172.22.22.132 Check your console in about 2 minutes name will be updated.    You will see in a packet trace that when you query the device with .local, the host replies to the multicast  query.  Meraki must be picking that up with a DNS Snooping type process to grab the name and update the console.  Not as simple as a lookup with ipaddress.local, must be hostname.local.  And since its multicase this will only work on your local subnet, so not an enterprise answer, but a start.... ... View more

Hi @CML_Todd ,   But how does vMX appliance know where to send the packets without a route table associated to it ?  I have the following scenarion, my vMX appliance is running as VPN concentrator mode as a HUB where it has established many S2S VPN connections with other spokes. The HUB is advertising some networks which then need to be sent to a NVA appliance in Azure (being in the same subnet as vMX appliance) for further filtering and so on. How does vMX appliance without a route table associated to its subnet know how to send these packets to the NVA ? Note that I am unable to set up static routes manually in vMX since it is running in a VPN concentrator mode. I tried removing the route table and the connection from spokes to Azure resources broke down.   If you can reply I would really apprciate it.   Thank you in advance !  ... View more

I just had the same issue. Rebooting and turning DHCP off for 5 minutes did NOT clear the DHCP leases. What did work was expanding the DHCP Reservation range temporarily and it cleared the DHCP leases in the Reserved range like the example below.  ... View more

14.33 release candidate seems to have that one fixed:     ... View more

@CML_Todd, glad it all got figured out. The exact process you had to go through is why it’s worth getting into the APIs and scripting if you’re not already. If you are creating multiple similar networks then you can develop a script to build the network, then use the script over and over just changing the element(s) required (e.g. variables for the subnet and name). It’s far easier than cloning and then having to change details. ... View more

Hi, I have a question. Which kind of license did you use for configuring/ enabling HA/ Warm Spare Failover? Is it Meraki Per-Device licensing or Meraki CO-Term Licensing? ... View more

Bruce,   I haven't found any official documentation saying Group Policies don't override site to site VPN firewall rules.  I wanted to see if anyone else could confirm my findings before I created a separate IT staff VLAN at all of my locations.    Thanks for the input, I appreciate it!     ... View more

Hey Todd,   We have not, just that one time. It makes things much easier to manage we enjoy using them. ... View more

I've created 3 new administrators in my organization, and all 3 are getting this same message.  They clicked on the link in the email from Meraki to setup their account.  After they changed their password, all 3 received this message.    I opened a case with Meraki, but haven't heard from them yet.  Wanted to see if anyone else got the same message.    BTW, I have no issues signing into this organization, just the 3 new users I created. ... View more

  I did the HA method to replace a MX400 from an RMA.  However I had to swap back and forth a couple of times as the RMA did not send me the SFP+ module and the modules are NOT hot-swap.  But it worked.  Each time the network stopped for only about 10 seconds.  The one issue we had that I had not seen mentioned anywhere is on the MS switch settings, I had the old MX mac address as the only one allowed for DHCP.  You need to add both mac addresses (old and new MX) to this setting before starting the swap in order to not cause DHCP blockage.    I did not, and to make things worse, I initiated a  MS firmware upgrade which meant that when the MS did a restart it did not get its address from the new MX and could therefore not reach the cloud to update even the DHCP mac allowed setting.  I had to physically visit every switch and give it a static - once connected to the cloud, the new allowed DHCP mac address synced and then everyone could get back into the network.  Simple mistake, bad consequences.  Just add to your list of things to check. ... View more

I've re-booted the MX, and even did a factory reset, and let it re-download it's config.     The MX can't ping the switch IP on the uplink either.  The uplink is a vlan interface on the MX.  And I have that vlan assigned to an access port on the MX.   The MS250 is running 11.30 firmware.  The MX is running 14.40   I've also been able to re-create this issue in a lab environment.   ... View more

Do you know if Group Policy rules will also override site-to-site vpn firewall rules?   ... View more

You're welcome. For future reference: None of the current outdoor APs (MR70, MR74, MR84) have a power connector. The current indoor ones do, except for the MR30H (MR20, MR33, MR42, MR45, MR52, MR53, MR55). ... View more

About 50. But I have 24 separate networks that they could possibly connect to. I'm trying to avoid having to enter all 50 devices on 24 different networks. (I know, I know, Systems Manager is the solution, but that's not an option for me right now.) ... View more

You may use 3rd party antennas on Meraki APs, but they are not officially supported.  I suppose you could say they are "partially" supported.  Meaning that if you open a ticket that has to do with RF coverage issues or a bridge link, and you're using 3rd party antennas, it's nothing Meraki Support can agree to formally help with.  They'll likely give you a best effort or make some suggestions, but it's unofficial because of course no vendor can test and certify every model of every other vendor's antennas.    The 4x4 Cisco Aironet antenna that is fully tested and certified with the MR84 is the "Gillaroo" stadium antenna, AIR-ANT2513P4M.     Also note that if you have a use case where Meraki antennas don't suffice, when you use 3rd party antennas, it is the customer's responsibility to know what they are doing, understand EIRP and dB math, and are not violating (exceeding) any Tx power limits in their regulatory domain.   ... View more

Thanks for the heads ups Zilla! I definitely plan on getting a demo. ... View more

Thanks for your reply.    Another thing I found in testing is that when a Group Policy is applied directly to the client, the rules in the Group Policy seem to apply to vpn tunnel traffic.  It seems funny to me that a Group Policy behaves differently depending on whether it's applied to a Vlan Network or directly to a client.   ... View more

Thank you sir!  I will give it a try.   ... View more