Also note this only creates a connection to just your site - and not to any other spokes that you have.  If they need access to the spokes then they will also need to build a VPN to each of your spokes. ... View more

Does anything appear in the Meraki event log?   When the DHCP fails - does it in fact shows as having done the lease to the device in the Meraki dashboard?   Try changing it to be a static DHCP reservation.  This changes the negotiation behaviour. ... View more

Updated last night and still same issue. ... View more

@Hernan wrote: Good day! Just want to share this method its applicable on W10 user's i just recently apply this to one of our client. On your VPN network settings check allow these protocols and check Unencrypted Password (PAP) On the Windows 10 machine, open the registry and navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent, make a new DWORD 32 bit value, call it AssumeUDPEncapsulationContextOnSendRule, give it a value of 2, then reboot the Windows 10 machine.  It should connect just fine. This one works for me Spent some hefty time on this, could get Android to work but not Win10 Machine.....Thank you ... View more

you can ask the meraki support (via support-case) to change the client VPN server default of  3des-sha1-modp1024 (= 3des-sha1-dh2) to  aes128-sha1-modp2048 (= aes128-sha1-dh14) unfort, although the IPSec protocol would support it, meraki can't activate both at the same time.   in case the chromebook requires sthg else, i bet you're out of luck (if your error is related to this). ... View more

Just tried the browser with in the wireless network and got this. Tried with port 80,443, 37777, 37778 no use. with out any port I get this. ... View more

@CashG load balancing is where you have two internet connections and you use both of them concurrently to spread your throughput.     Warm spare / high availability / hardware redundancy is where you have multiple piece of hardware to cover the poissibility of a hardware failure.  ... View more

  https://documentation.meraki.com/MX/Networks_and_Routing/Passthrough_Mode_on_the_MX_Security_Appliance_and_Z-series_Teleworker_Gateway   https://documentation.meraki.com/MX/Deployment_Guides/VPN_Concentrator_Deployment_Guide ... View more

Okay, if your VLANs on the switch are sorted the tagging is enabled on this port it should just be a matter of setting up the appropriate virtual interfaces on the ethernet device. This is pretty much up to the system admin of that system. If they said it worked on a different brand of switch then you could try using that. But personally, I have not had any issues with Meraki or CISCO switches and this kind of tagging to a device (even using VMWare / other virtualisation software).   I would suggest that if you have a macOS device floating around, (BSD backend) not sure what system you are using. Then you could try setting up VLANS on the ethernet interface. It is straight froward and you can do it all from the GUI (network settings). Could be worth a try! ... View more

@timeshimanshu  Lets assume I'm not a Network Engineer, and simple down the network to the MX84, a Cisco SG200 Layer 2 switch, and then my computer and a server. All I want is to allow 10.10.0.0 and 10.10.8.0 to freely communicate with each other.  MX is configured  Subnet-10.10.0.0/24, ID-1, MX IP-10.10.0.2 Then also Subnet-10.10.8.0/24, ID-8, MX IP-10.10.8.1 All ports are set to Trunk VLAN-1 with All VLANs allowed on the MX SG200 Switch Added a VLAN ID 8. All ports are set to Trunk and Untagged Do I set the port on the Switch that goes to the MX to both IDs? Then the port where the server is to both since one is a Virtual IP on 10.10.8.0? I'm also assuming the software vendor of the server can set a ID for them.  ... View more

*Update I took the VLANs out. There really isn't a reason to keep them separated, so I added some static routes in the MX and was able to ping all the IPs. However the system couldn't print for some odd reason. One problem down another one to go.  ... View more