As Per Meraki this is SGT order of operation for Adaptive policy  however usually most switch ports have VOIP and DATA both where PC is connected to Phone in 2 different vlan, now if I assign a TAG to this port will that TAG apply for voice and data packets both ?? if Yes then how do I tag voice traffic with a different SGT,  unless I am going 802.1X (which many people don't). other option is IP-SGT mapping and if I do IP - SGT mapping, the static port SGT will overwise SGT-IP mapping as per order of operation. I guess I can create 2 seperate IP-SGT mapping, one for VOIP another for DATA and not tag the port, but then the problem is its IP dependent and any VLAN miss match on port can potentially change how policy is applied to an endpoint bypassing security. ... View more

1. trying to block DNS IP (which is outside AdP domain) from a device in IOT .. IOT has tag 268, for DNS I create an adaptive policy object with DNS IP, then tied policy object to an SGT (10) in a group, then created a policy to block traffic between 268 and 10. but I can still ping it. My understanding was when the traffic hits switch, switch will look at destination IP, then figure out Dest SGT from ip-sgt mapping, evaluate policy and drop the traffic, but it’s still pinging, am I not understanding this correctly ?  2. for east west traffic it’s working fine, but I can still ping infrastructure SGT traffic, for instance if I block IOT from staff, then IOT will not ping staff, but IOT can still ping staff SVI IP, which is tagged with infrastructure SGT and IOT to Infra sgt is blocked.  appreciate any help and meaningful insight ... View more

I am seeing multiple issues with assigning SGTs, I have relevant HW ad Licenses. when I assign SGT at SSID level the SGT disappears as soon as I save it   after saving I though it may be cosmetic, the capture on wired interface do not show any CMD header.   then I thought let do it through group policy but same issue as soon as I save SGT in group policy it disappears.   has anyone seen this work ?   when I assign SGT from ISE for other SSIDs I can see the SGT tag, not nothing seems to work natively from Meraki. ... View more

getting 404 error Failed to fetch port configurations for switch with serial ****-*****-****. Status code: 404 No port data available. I know the key and other parameters are correct because I am able to fetch other information like Network IDs from Org Any help is appreciated.   import requests import csv # Function to get port configurations from a Meraki switch def get_port_config(api_key, org_id, serial) :     url = f"https://api.meraki.com/api/v1/organizations/{org_id}/devices/{serial}/switchPorts"     headers = {"X-Cisco-Meraki-API-Key": api_key, "Content-Type": "application/json"}     response = requests.get(url, headers=headers)     # Check if the response is successful (status code 200)     if response.status_code == 200:         return response.json()     else:         print(             f"Failed to fetch port configurations for switch with serial {serial}. Status code: {response.status_code}"         )         return None # Function to write port configurations to a CSV file def write_to_csv(ports_data, filename) :     if ports_data is None:         print("No port data available.")         return     with open(filename, "w", newline="") as csvfile:         fieldnames = ["Port", "Enabled", "VLAN", "Type"]         writer = csv.DictWriter(csvfile, fieldnames=fieldnames)         writer.writeheader()         for port in ports_data:             writer.writerow(                 {                     "Port": port.get("number", ""),                     "Enabled": port.get("enabled", ""),                     "VLAN": port.get("vlan", ""),                     "Type": port.get("type", ""),                 }             ) def main():     api_key = "****"     org_id = "****"     switch_serials = [         "****-****-****",         "****-****-****",     ]  # Add your switch serials here     output_filename = "port_configurations.csv"     for serial in switch_serials:         ports_data = get_port_config(api_key, org_id, serial)         write_to_csv(ports_data, f"{serial}_{output_filename}") if __name__ == "__main__":     main() ... View more

Hi community, can I connect MS130-24X-HW or MS130-48X-HW uplink with 1Gig although its SFP+ has anyone tried and confirm if it works ? ... View more

mx100 is not end of support until 2027, if I wanted to renew license on existing mx100 what license part should be used ? when i try lic-mx100-ent-1y its end of sale.    ... View more

Has anyone set an SSID with OWE security and Splash page Sign on with My Radius Server (Radius server is ISE in my case), I don't even see any log coming into ISE, I know communication is working because my radius tests are successful. I tried with passthrough and it works, I tried with Meraki Cloud Authentication and it works but not with My Radius. users get redirected to splash page prompting for username and password, but when they enter credential, it says access denied with no logs on ISE atall.   Is there a user guide I can follow or any tips from someone who has deployed in this way ? Wondering if radius need to have a static NAT with a public IP and need to be accessible from internet, if the request is sourced from dashboard and not AP itself ? ... View more

I am relatively new to SM, I am trying to push an App to Windows devices, seems fairly straight forward but the App never gets pushed, status shows error, when I try to push it manually it goes in installing state for hours but never installs. See the App config and point me in right direction.     ... View more