Any update on this?  I have a need to support 2 different companies on shared infrastructure and not being able to authenticate on different domains for the VPN would be an issue.   Maybe I need to create local VPN accounts on the Meraki infrastructure and create groups to allocate VPN resources?  This does seem a step backwards when I am trying to simplify things and push for use of MS credentials and MFA   Any advice would be appreciated! ... View more

Yes, you can do this from the dashboard UI easily under firmware if within so many days of the update, if past that just manually force the stable version firmware to the MX. ... View more

Ok on doing some more work on this it appears the MX IPSEC tunnels do not like it if they dont have constant traffic, not sure what the timeout is but if they have no traffic passing the tunnel drops and you need a ping or something similar to get the tunnel up and working again, they dont stay up on their own, we're seeing this on multiple MX models in different customer estates.   Does anyone know what the timeout is for the IPSEC drop out? ... View more

On more than one occasion I've seen it come from a random VLAN number, not the highest or even the lowest number, have seen this for both syslog and netflow and proved on packet captures, have a ticket running on the issue. ... View more

thanks both, will try this and see if it works, didnt realise the MX would just cope with it and allow a NAT for subnets it doesnt have on an interface. ... View more