There's a bit of problem with this.  The firmware page shows the most recent Stable release as 18.107.2.  A newer version of 18.107 is buried in the Other available versions section at the end.  Stable patches used to be visible in the Stable section.  In fact, the organization of the tabs has been recognized as declining in stability from left to right (Stable > Stable RC, Beta).  The label Other available versions communicates "don't look here unless you know what you are doing". ... View more

When attempting to move access points (e.g., MR20) from one network to another while NBAR is active, and where access points are not supported, the new dashboard displays "There was a problem moving the access points." whereas the old dashboard used to indicate "Cannot add MR20 devices to a network running NBAR. For instructions on how to disable NBAR, please visit here."   ... View more

Hi,   Thanks@MarcAEC for sharing, I stumbled upon this and the solution still seems to work good.   And it looks like the sharing of the 'disabled' routes is expected behavior as also described in the knowledge base:   https://documentation.meraki.com/MX/Networks_and_Routing/MX_Routing_Behavior   Advanced Configurations->Static Route Tracking: The route tracking mechanism only has local significance, which means, that the status of the route doesn't influence whether the route is advertised or not and it won't affect the routing on the remote end of the VPN.   Cheers ... View more

For those of you keeping track, I reached out Sept 13th for an update and this is the reply:   I've checked the investigation thread but there have not yet been any updates stating that this behavior has been resolved. I will be contacting our MX products team for confirmation of the current state of the investigation and will let you know if any of the recent firmware versions have a resolution for this behavior. Thank you for your patience, Christian Torres Network Support Engineer .ılı.ılı. Cisco Meraki ... View more

I had already been in contact with the AM before my first post here.  Things started out with me asking for a multi-year renewal quote.  I supplied an inventory and then a Zoom meeting was scheduled to discuss the quote.    It wasn't the AM that brought up the MX100 EOST.  It was someone from my team.  I stupidly responded  "I'm sure Meraki handles this situation reasonably.  The excess is probably transferable.  But, let's bring this up in the meeting to confirm."   The meeting started with the AM producing a quote that would take the MX100 over a year past EOST, but no mention of EOST.  Then we asked about EOST and the AM didn't have an answer for us.  He tried to contact his SE, but the SE didn't respond.  He followed up later via email stating that we would just lose the balance of the license.  That's when I posted here because that policy seemed ludicrous.   The AM did eventually find a solution to our satisfaction.  But I am sad and puzzled that Cisco Meraki's position on this is to screw the customer.  I'm not suggesting that if someone has 8 months left on an MX100 that they should allow a customer to transfer 8 months to an MX250.  But a weighted transfer based on list price difference would be fair and reasonable.  They already have those weights calculated for co-term licensing.  It's puzzling that they won't do the same thing for per-device licensing.   If my team member had not brought this up, we wouldn't have asked, the AM wouldn't have brought it up, and there would have been a very bitter conversation in 2026 or 2027 when we would find that we were sold a license not worth what we thought it was.  I avoided that.  But I bet there will be a lot of unnecessary drama from customers that don't. ... View more

The ability to block statistical P2P (NBAR 1889) as a category was disabled before the Holidays in 2022 as I noted in this response: https://community.meraki.com/t5/Security-SD-WAN/MX-NBAR-blocking-Statistical-Peer-to-peer-traffi/m-p/179500/highlight/true#M42349 This includes removing it from all aggregate or "All X" rules it may have been a part of ... View more

I've had that happen a couple of times with an MX67.  Support claimed that there was an upstream firewall on one of the WAN circuits blocking communication, but both connections are direct to the WAN circuits. ... View more

After working with Cisco Meraki and Cisco TAC, we can confirm from multiple packet captures, that this is totally the case, and is a major problem in the Meraki software.   We tested too, and it looks like when a "real" fail-over happens, the 1:1 NAT is handled correctly. When we do a switch of primary-spare initiated from the Meraki dashboard, the 1:1 NAT stays with the device which becomes inactive and it will not work properly.  When the forced fail-over happens, the MX is sending its physical mac address to the ARP Table, not the virtual mac address, as it should when a "real" fail-over happens.   This is confirmed and we have case numbers on both sides working with engineers. ... View more

I set up a spare MX67 and replicated the conditions.  First, it was attached to the network and downloaded a configuration.  Then it was disconnected from the WAN and left offline for a few days.  Then a computer was connected to one of the network ports.  The MX67 was found giving out the 192.16.0.x IP addresses and the local status page had reverted to the default username and password.    To me, it looks like a fail-safe mode that has the unfortunate side effect of making a major outage worse by removing access to local resources.  I could see some reasoning behind designing this type of fail-safe, but it seems the developers didn't take into account the fact that local servers tend to have static IPs. ... View more

This firmware was automatically pushed to my MX100 last night and bricked it. It is now stuck in a continuous reboot loop with no way to reset it and get to the setup page. ... View more

I am removing our whitelisted rule tomorrow, I don't expect any issues. ... View more

The list of "Current Modems" that are "...are still actively being manufactured, distributed, and sold..." is now officially empty.  ... View more

@LehmansITMgr we run MX250s on RC firmware and they have been stable.  I'd personally give it a try and you can always roll back if you experience issues. ... View more

Sorry, misread your question. MG would "only" be a replacement for the USB modem, but will definitely need its own WAN port. ... View more

@MarcAEC i got a quick response from MaxMind, within a couple of hours that the issue should be fixed in their database "next Tuesday" hopefully that means tomorrow. thanks again for your help!     Dear Requester, We have reviewed and accepted your correction for IP range https://protect-us.mimecast.com/s/LNsiCKrG6YS7NBXuMnKkV?domain=192.124.249.0. The corrected data should appear in next Tuesday’s update. We will not send additional confirmation emails for separate corrections (you have submitted) that are accepted within the next 24 hours. You may check whether your correction was applied via our database or web service online demos: GeoIP2 City Database Demo GeoIP2 City Precision Web Service Demo If you have any questions please contact us at correction@maxmind.com. Sincerely, The Team at MaxMind ... View more

I'm not asking for them to add any features.  I'm just asking them to fix a bug in a feature they have already chosen to deliver.  It's not unreasonable to want them to do that in a timely manner.    It wouldn't be correct to add the rules to the template because the port forwards are different at each site. ... View more

Meraki DHCP is set to provide the domain suffix (option 15).  But none of the Ricoh printers are using DHCP.  I also noticed that some of the printers that were successfully scanning to email didn't have the correct value in the field.  It seems just being blank was a problem. ... View more

This thread makes me never want to upgrade any of my stacks. I'm new to Meraki (old school Cisco here). I would never want to leave some sort of vulnerability open though. My switches are currently on 11.31, and haven't seen any real issues that force me to upgrade. I just see that "Update available" message and think I should.   ... View more