I have similar with two new MG21s. 2nd took a bit of time to get connected . It was connected for 24hrs before it disconnected and hasn't been connected since. Has anyone had a fix to this? ... View more

Hello. Say you have a Hub-Spoke network consisting of both a Private IP MPLS network and Public Internet network this and the Hub has a Palo Alto NG firewall   VPN Automated NAT traversal will not work as the PA randomly changes the outbound VPN UDP port. Therefore the remote peers keep sending the to the detination Hub IP but with changing the VPN NAT destination port matched. The PA sees changing ports from the same IP address an intrusion attack and blocks.   VPN Manual port forwarding allows only one Public IP:Port to be set. Therefore the remote peer that has a Private IP MPLS will not attempt to connect to the Hub MX using its internal IP address.   The solution was to create a 1-to-1 NAT on the Hub PA (specific external IP to Hub MX IP (real or virtual) and allow all Meraki VPN UDP ports ... View more

Today we have the same issue (?) with several sites; two already existing on the internal MX and two moved from a provider MX to the internal MX. The APs are connected to the internal MX but the 'tunnel' test fails. Yet, we have many other site's APs working fine on the internal MX.   A symptom is the Guest SSID is not broadcast.   If we move an AP back to the providers MX the Guest Wifi re-appears and clients get connected.   What was the resolution to the original post>   ... View more