What a pain! ... View more

Going sideways; depending on what model switches you have; you could enable SecurePort which can automatically recognise and configure a switch port for an MR. https://documentation.meraki.com/MS/Access_Control/SecurePort_(formerly_known_as_SecureConnect)   You could also consider create a standardised port profile for APs, and rather than apply specific port settings, apply the profile for an AP.     ... View more

I bet @sungod will have a better approach.  🙂 ... View more

API wise;   You could use this to get a list of all MS switches (set productTypes filter to "switch"): https://developer.cisco.com/meraki/api-v1/get-organization-inventory-devices/   And then for each switch, use this to get the LLDP neighbours. https://developer.cisco.com/meraki/api-v1/get-device-lldp-cdp/   And then for each switch port above that shows something with a systemName containing "Meraki MR", update the port.   ... View more

Depending on how many networks you have, you could go into each network and go Switching/Switchports.   Use the spanner in the top right hand corner, and enabled the CDL/LLDP column.   And then search on "MR" to see all access points.  You can then select all the switch ports and change them in one hit. ... View more

Device type rules don't work that reliably.  Sometimes, they might take a while to kick in, like 10 minutes. ... View more

I don't understand the problem you are describing.   Can you elaborate? ... View more

You don't get a lot of rich information via SNMP for Meraki - host of that comes via the API.  Which monitoring platform are you using?  Many like PRTG have native Meraki API monitoring support.   You can run SNMP against the cloud, or directly againt the device itself.  From memory, you get more info when running directly against the device itself.   Your snmpwalk command you use is using V3, or so I not sure what you mean by enabling it - you are already using it. ... View more

Are you coming to Cisco Live in Melbourne in November? ... View more

It is on the very bottom of the Dashboard in small print.     ... View more

Nothing tricky involved.  I tend to configure 1:1 NAT (as my first choice) but you can also do 1:many NAT. https://documentation.meraki.com/MX/NAT_and_Port_Forwarding/Port_Forwarding_and_NAT_Rules_on_the_MX#1:1_NAT   ... View more

Special thanks to @HectorM , @Jamieinbox and @KH.  And of course thank you to all the regulars who put in so many hours every month.  The community wouldn't exist without you. ... View more

Use an automation tool to remove the file.  You could use Powershell+group policy in AD, Powershell+Intune, a login script, ... ... View more

There have been no changes in this area. ... View more

>NFR is the same process as any other NFR product   That is the process I tried using.  It is not available for SecureConnect SKUs.  As in, the discount is 0%. ... View more

That is fine.  Ports 13, 14 and 16 would often to put into their own seperate VLAN (to match the VLAN configuration being used on the MXs). ... View more

They are stored in this directory (and you can delete them): %ProgramData%\Cisco\Cisco Secure Client\VPN\Profile   Pro tip for a long standing bug - when ever you upload the profile to the dashboard, the dashboard ALWAYS appends .xml onto the filename, even if the filename already ends in .xml.  So if you upload profile.xml, it gets saved as profile.xml.xml, and download to the client like that.  So you need to upload profile.xml as profile. ... View more

Thanks for joining @Mehar .  Where in the world are you based? ... View more

Thanks for testing this. ... View more

>Trials of Secure Connect are available for customers   I worked extensively with the team in my country - no one could find a way to start a trial.  Could you send me a message with the process for a Cisco employee to do this, as I would be interested in doing trials.  I will pass the process onto my local Cisco team.   >NFR purchases for partners are available for internal/lab use.    Could you send me a message how to do this.  I spent 4 weeks trying to order NFR licences.  No one could find a process for being able to do this.  4 weeks! ... View more

I'm not aware of any APIs for this - and I think it is unlikely with Thousand Eyes having been added to the Cisco family. ... View more

Can you see the 10.105.10.0/24 traffic hitting the Fortigate? ... View more

  Is there anything dual connected - like an MX?  If so you could try an experiment, and temporarily shut down those ports to see if anything changes.   You could try and experiment, and remove as many devices as possible to see if you can get the error to go away, and then add them back in again till you see what causes the issue. ... View more

I'm guessing you are using something like getNetworkClients, which reports "disconnection" based on the "last traffic seen" by the client (actually I think it might be last traffic + 15 mins or 30 mins).  If you use this approach, you should label the report "Last traffic seen".   If you wanted to take it a step further you could need to look at what they were attached to in the network, and then see when they disconnected from that (such as a switch port going down). ... View more

You would need to use a RBAC third party solution like Boundless Digital. https://www.boundlessdigital.com/product/access-control/   ... View more