That worked for me. Thanks! 👌 ... View more

Only use the Site-1-abcde.dynamic-m.com DNS name in your SAML config.   Once WAN1 has failed it can take up to 10 minutes (average of 5 minutes) for the DDNS to update and then clients will be able to re-connect via WAN2. ... View more

Hi,   Thanks@MarcAEC for sharing, I stumbled upon this and the solution still seems to work good.   And it looks like the sharing of the 'disabled' routes is expected behavior as also described in the knowledge base:   https://documentation.meraki.com/MX/Networks_and_Routing/MX_Routing_Behavior   Advanced Configurations->Static Route Tracking: The route tracking mechanism only has local significance, which means, that the status of the route doesn't influence whether the route is advertised or not and it won't affect the routing on the remote end of the VPN.   Cheers ... View more

Both PhilipDAth and AaronDo were correct, I needed to test it from outside my MX and I had forgotten to add teh custome port. Thank you both for you help. ... View more

I 'think' I still see the issues too.  It's hard to tell sometimes.  The types of people I facetime with often have just regular ISP-provided home routers/WiFi, so of course if they're moving around in their homes or offices it's going to be jumpy at times.     I have not tested extensively where if Facetime is acting up one day, we switch to Zoom or something else.     However, I can say one thing:  video streaming through all other services is never an issue - but, those are designed sometimes to buffer a bit of video to account for signal anomolies whereas of course video conferencing does not.  So who knows, but I never have glitches with say, Netflix, no matter where I roam around.     I do think Meraki has a need to dig further on this issue too, but I really think it requires a dedicated engineering effort, not just a bit of curiosity testing in the lab (if that's how it goes, I don't know 🙂 ).   ... View more

@Phil_SCDS(Edit: If your user is Win10) Is there any chance your user is able to run a PowerShell script? I realize that may be disabled for security purposes, but I live in a world where lol security so.   I've got one that's fairly simple and can be changed to not require administrator permissions. There's comments in it that tell you exactly what to change, although please do test on your PC.    To run:   1. Open PowerShell 2. Allow PowerShell to run the script with this command: set-executionpolicy -scope process unrestricted 3. Run the script. 4. Answer the prompts. 5. Close PowerShell   If you walk through it, you can probably write better instructions. My help desk has significantly longer ones but they're not easy to share. ... View more

SoCalRacer,   Thank you that was it, there was a random layer 3 wireless firewall rule blocking access to the local LAN. Must be a default policy because I hadn't set it.   Thanks again,   Phil ... View more

I have done this before with MR16s, MR18s and MR20s. It works fine. Access points in general are somewhat directional so with them pointing at the floor you probably will not get the best coverage, however if it is your only option and you have enough points to cover the area needed then it will work.   Phil ... View more