Did you ever find the solution to your issue? ... View more

@Loquanet    I wasn't born yesterday.   Was that your standard reply because the reference I posted went straight over your head.  ... View more

Hi @Prashant_India.   You would need to use the dual active head end design. https://www.willette.works/active-active-meraki-sd-wan-headends/  ... View more

I'm not clear on what @Prashant_India is referring to... Perhaps you can provide more info on that?   @Soro1 the Internet Flow Preferences only take IP addresses, so no you can't do this with FQDNs unfortunately. If you want to use single IP addresses for destinations use a /32 mask.  ... View more

That looks pretty good! ... View more

To confirm:   You need to maintain a large Meraki cloud credential user database. You want to use AD credentials to provide Meraki dashboard access for managing those.   Solution:   Setup SAML SSO: https://documentation.meraki.com/zGeneral_Administration/Managing_Dashboard_Access/Configuring_SAML_Single_Sign-on_for_Dashboard   The linked document includes instructions for setting it up with several supported methods. There's also Azure support.   If you want someone to only be able to manage users, create a role with the Guest Ambassador permission. You'll have to set this up on a per-network basis. ... View more

Options in DHCP are defined in RFC 2132, 3046 and 3495.  From the screenshot you took of your Microsoft DHCP, it appears the configuration you are trying to copy is non-standard.  You need to adhere to the RFC's and not assign your DHCP options according to your preference.  Vendor specific options start at 43.   iana.org has a good guide as to the expected option configuration per normal standards. https://www.iana.org/assignments/bootp-dhcp-parameters/bootp-dhcp-parameters.xhtml ... View more

Essentially, yes. You can set firewall rules for that subnet, but then you may restrict access that your employees need.   I really, strongly would recommend pursuing a non-Meraki client VPN solution. If I had a client with your needs, since we're a Cisco/Meraki VAR, I'd sell an ASA or Firepower device. ... View more