Once you set the good mx as primary, and the bad/down mx as spare.   There is a pencil icon behind the spare. You can  change the serial of the spare if you click it ... View more

From this info it looks like the usb port would not function. But radio would be fine.   https://www.cisco.com/c/en/us/products/collateral/wireless/catalyst-9100ax-access-points/wireless-9172-series-access-points-ds.html   Its also mentioned here https://meraki.cisco.com/product-collateral/meraki-wireless-cloud-family-datasheet-managed-wireless-access-points/   Higher model AP will lose more features https://documentation.meraki.com/MR/MR_Overview_and_Specifications/CW9176I_%2F%2F_CW9176D1_Datasheet#9176_Power_Negotiation_and_Features ... View more

Im not sure about the session timeout, could be 5-10 minutes. Also would depend on if the protocol closes the session itself or not.   If you didnt go to that website before, it should work/be blocked.   ... View more

Fw rules do not work on active sessions. You need to wait like 10 minutes for the firewall to clear active session.   Or reboot the mx to clear all sessions ... View more

It needs public dns on the uplink for management because it need to reach the cloud /dashboard to come online and before the tunnels are build.   You can use any dns you like on the vlans ... View more

third-party VPN does not participate in the auto VPN. So you would need a direct 3rd party vpn tunnel between the z3 and the peer ... View more

What happens is that all lan side network traffic passes through several devices and have some correlation so its not displayed several times in your dashboard.    But for example: when you are using switches on lan and wan side in the same dashboard network you will see a LANclient-to-wan traffic flow as a private IP but also as wan IP(nat).  ... View more

Yes, it would give you better/more consistant reporting. Check out the slide deck in this topic https://community.meraki.com/t5/Security-SD-WAN/How-to-turn-MS120-into-WAN-breakout-for-2-ISPs-and-2-MX250s-in/m-p/186160 ... View more

Put both on auto. Make sure the cable is good and fully plugged in on both sides Try another switch port ... View more

Maybe somehow related to an old network using the same template? ... View more

That is strange.  It should be working for traffic shaping rules.   For vpn traffic-policies its still not available afaik ... View more

The picture is not for the traffic shaping section  ... View more

If you configure pppoe setting on the port it automatic applies mtu 1492.   In any other case for lowering mtu you have to contact Meraki support ... View more

In 19.x there is a option for bgp in a vpn.  Not used  it yet, but i would asume if the peer did something like path-prepending the route would be less preffered for the mx https://documentation.meraki.com/MX/Site-to-site_VPN/BGP_routing_over_IPsec_VPN ... View more

How do you test the vpn speed?   Behind al mx you get over 200Mbps internet speed? ... View more

Looks udld related. Make sure the fibers are connected / correctly Udld  ... View more

Hmm or it gets more sketchy when it apply the rules. This fix is also in 18.211.5 but it took a long time to take effect for a vpn fw rule, that i ended up rebooting. I wonder what it exactly  does. ... View more

I do see the same behavior.   If i were to guess, its counting something like "devices seen online in last 24 hours".  ... View more

Where are these routes pointing to, are this autovpn learned routes or lan routes?    Meraki doesnt really have such thing. But maybe you can set some static supernet route that covers some bgp subnets.  ... View more

You would need sdwan+ license or meraki insight to get wan2 alerts from meraki/dashboard.    You could possible build on monitor it yourself with for example the meraki api ... View more

Contact support https://community.meraki.com/t5/Cloud-Security-SD-WAN-vMX/vMX-now-requiring-edition-to-match-org/m-p/259163#M2238 ... View more

Meraki MS uses mode active. So the other side can be active or passive. But it needs to be lacp. I just noted the "mode active" setting to check if you see such a setting to make sure you are configuring lacp and not some kind of static LAG ... View more

Look if 1:1 nat is enough for your use case https://documentation.meraki.com/MX/NAT_and_Port_Forwarding/Port_Forwarding_and_NAT_Rules_on_the_MX#1:1_NAT   If you really want to route a public subnet then you can use this https://documentation.meraki.com/MX/Networks_and_Routing/NAT_Exceptions-No_NAT_on_MX_Security_Appliances#Publicly_routable_LAN_subnets_and_DMZs ... View more