Hey Friends!   Lucky Sandro is off on annual leave today, so I will provide the answer.    This week the answer was ...   B.) Client VPN     Each type of route configured on the MX has a specific priority in comparison with other types of routes. The priority is as follows:   Directly Connected Client VPN Static Routes AutoVPN Routes Non-Meraki VPN Peers BGP learned Routes NAT* *If no routes are defined, then the traffic is NATed and sent out an active Internet interface. This only occurs while the MX is configured in Routed mode   All information can be found here: https://documentation.meraki.com/MX/Networks_and_Routing/MX_Routing_Behavior ... View more

Another week, another answer!   This time we were looking for...   C.) To avoid exceeding Dashboard limitations with the max number of devices per network   Thank you to All-Star Profile: UCcert for providing us with the relevant documentation and best practice guides: https://documentation.meraki.com/Architectures_and_Best_Practices/Cisco_Meraki_Best_Practice_Design   As a quick note there are limits of:   25000 devices per Organisation 1000 Devices per Network 1 (active) MX per Network   Personally I haven't seen Networks / Organisations reaching these numbers (apart from the MX!!), what about you lot? ... View more

Another week, another answer.   First up, apologies if the wording wasn't of the question wasn't quite clear - Although it looks like most of you managed anyway!!   This time we were looking for...   B. L3 allow/deny > L3 implicit allow > L7 deny   The MX begins by checking if there is a matching Layer 3 (L3) rule - if so, it will make the appropriate decision based on the allow/deny parameters, else the MX will fall back on its L3 implicit allow rule. After this, the MX will check for any Layer 7 (L7) rule matches. If there is then the MX will discard the traffic/packet.   The wording of  'Layer 7 Deny' might have caught a few off guard - It was included because on the MX, if traffic matches an allow rule on the L3 firewall, it can still be blocked by an L7 firewall rule. The same cannot be said for our MR access points, which will bypass the L7 firewall altogether if traffic matches an allow rule on the L3 firewall.     As before more info here:   https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Layer_3_and_7_Firewall_Processing_Order       ... View more

The answer we were looking for was...     A.) Local Settings     Well done to those who got it right.   Here is a sneak peak from ECMS2 that gives all the information you would need about switch cloning:     You can also read more here:   https://documentation.meraki.com/MS/Other_Topics/Switch_Cloning     ... View more