This is an overview page and includes a link to a webinar if you want to lean more. https://meraki.cisco.com/solutions/sd-wan ... View more

Stop it, I'll get a big head.:-) ... View more

The checks are done when AutoVPN is enabled (so the template should be configured to be a spoke).  The subnet must be unique amongst all AutoVPN networks (or will be rejected). ... View more

Hmm, that is interesting.   I was just looking at a clients MX, and they have manual port forward configured and have dual WAN circuits.  We are using SD-WAN - and the WAN ports are running AutoVPN active/active - and it is working.   One thing of note though is that their WAN2 has a public IP directly on it - so no NAT is required for AutoVPN to WAN2. ... View more

ps. I gave up on using Powershell for scripting.  One of the issues with it is that when you start powershell running for a one off job (such as a triggered event or task scheduler (for example)) it has to instantiate the whole .Net engine.  This can take a couple of seconds.  If you are trying to run a lot of single fire operations this creates big problems.   The .Net instantiation is a really slow process, and inherent in the powershell architecture - so can not be fixed.   .Net apps suffer the same issue when you recycle their application pools in IIS.  I have clients with apps where IIS can't process any requests for 5 minutes after a pool recycle.     You may find moving off to other scripting languages like Python will be your best fix. ... View more

First I would remove all the compulsory sleep operations you have.  The rest is taking long enough without adding those. Start-Sleep -Milliseconds 200   The next thought on my mind is weather this is static routes on an MX or MS.   If it is on an MX have you considered using route tracking? https://documentation.meraki.com/MX/Networks_and_Routing/MX_Routing_Behavior#Static_Route_Tracking ... View more

@jdsilva only a single policy can have a schedule.  So if the Morning policy has a schedule, you can not attach a second schedule to the Afternoon policy. ... View more

Templated networks can have unique /24's per site - and it sounds like you should be using templates. https://documentation.meraki.com/zGeneral_Administration/Templates_and_Config_Sync/Managing_Multiple_Networks_with_Configuration_Templates#MX.2FZ1_-_Template_VLAN_IP_Address_Range_Allocations Then if you change the template every site will get updated automatically.   It will be a big effort to change over.  You'll want to create a template by copying an existing network first (to get most of the settings).  Set the template to use unique addressing.  Then you can bind one network at a time to the template.  note that when you bind a network to a template it will loose the existing subnet assigned - so you will need to go into the bound network afterwards and configure the subnet you want to use again.   Using a template will make sure all of your sites are configured identically. ... View more

I am also using the free legacy version of Meraki Systems Manager.   However I am enrolled in the Apple Business program (business.apple.com), rather than the Apple Education program.  I wonder if that is the difference. ... View more

Meraki have an open API, so IronWiFi would just need to integrate with it.   I believe Splash Access already provides integration with Azure AD if you don't mind using a third party. https://www.splashaccess.com/cisco-meraki-azure-ad-with-splashaccess/ ... View more

You can't get exactly what you want, but check out the Organisation Summary report, as it gives close to what you want. https://documentation.meraki.com/zGeneral_Administration/Monitoring_and_Reporting/Summary_Report_Overview   ... View more

It looks like MaaS360 is some kind on on-premise virtual appliance?   How do the clients find it?  Via DNS?  If so, is there seperate internal and external DNS entries being used to handle clients being inside or outside your network?   Is the SSID operating in bridge mode and just using your internal DNS servers?   ... View more

Not using SAML, no (at least not out of the box).   But I see Okta have an LDAP interface: https://www.okta.com/blog/2018/09/move-ldap-authentication-to-the-cloud-with-oktas-ldap-interface/   And you can configure LDAP splash page authentication. https://documentation.meraki.com/MR/Splash_Page/Configuring_Splash_Page_Authentication_with_an_LDAP_Server     ... View more

Not much much ... but I'm based in NZ and it is not greyed out for me.   This makes me wonder if there is something wrong with your Apple business account.  If you log in manually using that account you don't get any agreements to accept or anything?   ... View more

Note that a MX in concentrator mode can advertise a static route.  Check out this post I did describing how. https://community.meraki.com/t5/Security-SD-WAN/Vmx-100-routing/m-p/18526/highlight/true#M4455   As @GreenMan says, the OSPF support only advertises AutoVPN routes.  I does not listen to routes.   If you really want to go down this path you should open a ticket with support and ask to go on the BGP beta program, and change to using BGP.  The BGP support is two-way. ... View more

@BrechtSchamp they have even udated the documentation to use the method I was recommending in that article.   https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair#Recommended_Topologies ... View more

Is the date/time on your machines roughly correct? ... View more

Does the dashbard show that the vMX is online? Does the dashboard show that the vMX is registered as a VPN end point? ... View more

I've never had any issues myself.   My best guess is you have an AWS security policy not allowing the traffic. ... View more

This can happen if you have applied a policy against two different connections types (such as MR and MX).  You then end up with "custom" showing, or it changing depending on how the user is connected.   When you are viewing the user, there is a little "something" (can't quite remember what it is) to expand by the "custom" showing how the policy is applying by connection type. ... View more

Meraki have it "labelled" as that - but in my opinion it is better than the stable 13.x train.   We have very few clients left still using 13.x.   I suspect 14.x will officially become the stable train within the next 6 months (if not sooner). ... View more

Your Phase 1 and 2 crypto settings must be right, because the VPN is operating for some period of time. You could ptentially check the times match at both ends.   It sounds like the VPN re-negotiation is failing.  This should happen before the original VPN expires.  It may be that the two ends handle this in a different way - and may not be resolvable (at least not without firmware upgrades).   On the Meraki side, I would tend to use the 14.x firmware, such as 14.37.     I also see that you are running the VPN with NAT between the two ends.  You should avoid this kind of configuration.  Are you able to get public IP addresses on the two VPN devices directly (the MX and the Juniper)? ... View more