Documentation really helped.  If I want to test this on just one switch ( have 3), and on just one port, will all connected clients be affected when I make this on the NPS?  Or does it only get applied when it is applied via Meraki? ... View more

15.21.1 stable patch has now been released with the sole change of fixing the PoE for the GS range of switches. ... View more

Happy Holidays 2023 @AmyReyes ! ... View more

@Brash 👏 for your dedication 🙂  ... View more

I just re-tested this, Cisco AnyConnect with SAML against DUO using a trusted device policy to only allow authorised devices to use VPN - and it worked! ... View more

D'Oh! ... View more

@PhilipDAth Agree with you it is much better than normal client VPN.  ... View more

The Dynamic DNS updates automatically to whatever Public IP the MX is using, but it can take about 10mins go update as per this:   Note: The expected TTL for dynamic DNS records is typically about 10 minutes, so you may need to wait 10 minutes before testing to see accurate results. - Dynamic DNS (DDNS) - Cisco Meraki ... View more

See here: MX Uplink Settings - Cisco Meraki The live data graph provides a real-time view of the uplink traffic that is passing through the MX to and from the uplink interface. The graph breaks down the total and download traffic into two separate, color-coded lines. The Historical Data graph will give latency and loss statistics that can be used to determine your Internet circuits suitability for VoIP. Further to that, you look into trialling Meraki Insight and using the VoIP Health monitoring features: MI VoIP Health - Cisco Meraki While we're talking about VoIP and you mentioned you're full stack, if you're thinking of VoIP over Wireless, read this: Wireless VoIP QoS Best Practices - Cisco Meraki ... View more

Hey James, thanks for your 2¢ that's what i need. Two brains are better than one. The devs don't use desktops they use laptops that they have their own tools and dev environments installed on. The hot desks are just monitors, keyboard and mouse with a docking station they plug their laptops in to. The issue is that I suspect the ethernet adapter which i think is in the docking station will have its own mac address so this wont be unique to the users. If They plugged their laptops directly in to an ethernet cable I could then just setup static i.p's based on their laptops ethernet mac address and point dns to them but they don't, they connect to the docking station via usb which gives them access to the internet. I think if two laptops plugged in to that same docking station at different time they would get the same mac address, which would be the mac address of the docking station but I could be wrong. Guess i'll need to test it. You question has helped me think of other ideas so thanks 🙂 ... View more

If you're intending to provision the MX over cellular, beware of this: "When bringing the units online for the very first time, MX67C/68CW units should be connected via a wired WAN interface to the Meraki Dashboard to retrieve an update to allow for proper use of the integrated cellular connectivity." - MX67 and MX68 Datasheet - Cisco Meraki Out of box MXs may not have stable cellular drivers, requiring Internet access over WAN to download latest firmware. Indeed, for whatever reason, Meraki has lately been encouraging the use of their own MG cellular modems connected via MX WAN ports, rather than their legacy cellular solutions.   Regarding 3rd party VPN over cellular, if you control the cellular network, can provide static IP addressing and manage and limit NAT-ing as much as possible then you should be able to get it working. However, this is an edge case design (I can't find anything in the documentation) so you'll be on the bleeding edge of finding any stability/reliability bugs.     ... View more

in future firmware yes. no timeline as of right now. ... View more

@WarrenG How did you get on ?   ... View more

Ironically, the setup we did in Azure to test came up almost straight away. Untangling the right options and getting things in the right NSG to start with is more of a challenge there and as you can't change the vMX appliance once it's deployed it meant we had to tear it down and rebuild it again but once we had that done it was up and running. ... View more