Yes. The MS130, MS150, MS390, and C9300 require the same license tier (either Enterprise or Advanced) across the entire Organization, but they do not need to match the Enterprise MS license tier of the other switches that don’t support Advanced MS licensing   https://documentation.meraki.com/MS/MS_Overview_and_Specifications/Catalyst_9300X-M_Datasheet#Catalyst_9300.2FL.2FX-M_Licensing   I asume its the same for 9200 if that support adv lic ... View more

Sounds like a client send traffic  going to a public address 192.0.2.1.  So you would not find a network client with that ip ... View more

the user can request a password reset themself.    The other option is to delete the user and create the user again ... View more

Should also be possible with sdwan+ license  Link ... View more

I dont use ms125,  but i doubt a ms125 can even run layer3/vrrp?   And if you wouldnt already have both licences , the dashboard would have let you know for sure.       ... View more

I dont think you need to update.it looks like you already running latest possible firmware (30.7.1) for that AP   "Wi-Fi 5 Wave 2 MRs support - This version and subsequent MR 31.x.x are only supported on 802.11ax (Wi-Fi 6) and newer MR models. 802.11ac Wave 2 and older products will upgrade to the backup version (MR 30.7.1) if they are in networks configured for MR 31.x.x versions, and thus, the new features will not be available. The bug fixes listed below will also not apply to Wi-Fi 5 Wave 2 and older MRs. (https://documentation.meraki.com/MR/Other_Topics/Cisco_Meraki_MR_Firmware_Restrictions_Overview_and_FAQ) " ... View more

You could also try ask meraki support to upgrade just one AP   The other option would be to move the AP to a cloned network. And upgrade that network. ... View more

I agree. For vpn status i think its better to look at this api and use a low time range.  https://developer.cisco.com/meraki/api-v1/get-organization-appliance-vpn-stats/ Then check for example if Mos is not 0 or a certain loss %. ... View more

You have to use the meraki vpn statefull firewall  https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-site_VPN_Firewall_Rule_Behavior   Or the group policy stateless rules https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Using_Layer_3_Firewall_Rules   ... View more

Would be similar to this design  https://documentation.meraki.com/MX/Networks_and_Routing/Integrating_an_MPLS_Connection_on_the_MX_LAN ... View more

Looks good so far. Your radio settings have 2.4ghz enabled? Any logging on the wireless health page regarding this ssid? ... View more

Is that the config of the trunk to AP . And also the trunk between switch-mx?   ... View more

Are you using nat or bridge mode for the guest?   In case of bridge mode, does you dhcp server/scope have free adresses left?   What does the wireless health report?   ... View more

Yes it works how you described.   "IP address of DHCP server to relay to. The IP address must be in a subnet connected to this Meraki network or to a Meraki network reachable through site-to-site VPN. Relaying through a non-Meraki VPN peer is not supported."   ... View more

Could you try to reboot the device. The behavior is a bit consfusion if for example before there was a sfp inserted  https://documentation.meraki.com/MX/MX_Overviews_and_Specifications/WAN_Behavior_on_MX75%2F%2F85%2F%2F95%2F%2F105#Truth_Tables   Did you also verify the wan4 provider works. For example connecting a laptop to that (new) wan provider router ... View more

https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Blocking_and_Allowing_Clients#Block   Sometimes it need a reconnect to force the change.    https://documentation.meraki.com/General_Administration/Tools_and_Troubleshooting/Troubleshooting_Group_Policies#Why_isn't_my_Group_Policy_applying.3F ... View more

What firmware release is this device on? Did you try running latest stable firmware or latest rc? ... View more

I WANT IT ... View more

Yes i see them on regular basis on the catalyst switches.  Seems like a default process running every 5-6 hours even if you dont do changes.  Contact support to see if they can figure out the ospf part ... View more

I would contact support to ask about this behavior. Maybe there is some vpn problem between the hubs, or some kind of backend override  or summarization.   It should work as described here https://documentation.meraki.com/MX/Networks_and_Routing/MX_Routing_Behavior#Overlapping_Routes ... View more

Does spoke A and Hub A have the spoke B subnet in the routing table with a green dot ?   Is there any dynamic routing between Hub A and Core A? ... View more

The MTR (Enhanced Traceroute) does show them. Or is there a specific reason you use the normal traceroute ... View more

Wouldnt even install this version with these kind of bugs   MS225 switches may infrequently stop forwarding client traffic until the switch is rebooted   In rare circumstances MS225 switches may encounter a software crash that results in a reboot ... View more