Make sure you set "Captive portal strength" to "Block all access until sign-on is complete".   ... View more

You haven't let the certificate expire by chance?  Has it been about 12 months since they were first setup? ... View more

Only advice @trunolimit, when it is that bad, strip everything and start again. ... View more

Sorry to use you go @Uberseehandel and I look forward to hearing about the release of the "Uber Foil".  I bet it works out great.   And thank you again @CarolineS for the recognition and managing this community. ... View more

Does the firewall show any traffic/flows coming from the switch management IP addresses (you might have to wait a while to see this when they are not working as they will back off)   Does the firewall ARP cache show the IP addresses of the switches? ... View more

One step forward @jwwork.   Your should be able to use either external or internal DNS without issue (as long as the firewall allows it and can route it for you).   Just to be crystal clear; the switch management IP addresses are now in the same VLAN as a firewall interface.  Correct?   If you check the local status page does it definitely report the correct VLAN, and does it also have the same "DNS" error or does it mention some other error? ... View more

You have your answer.  The management IP for the MS425 needs a default gateway of 10.x.x.1 and the management IP needs to be from the same VLAN (and needs to be unique so it can not be 10.x.x.2).   You'll be online shortly! ... View more

This is also a great reference to help you out: https://documentation.meraki.com/MS/Layer_3_Switching/Layer_3_Switch_Example ... View more

https://documentation.meraki.com/MS/Layer_3_Switching/MS_Layer_3_Switching_Overview#Notes_regarding_switch_management_address_when_using_L3_routing   "The management IP is treated entirely different from the layer 3 routed interfaces and must be a different IP address. It can be placed on a routed or non-routed VLAN (such as in the case of a management VLAN independent from client traffic). Traffic using the management IP address to communicate with the Cisco Meraki Cloud Controller will not use the layer 3 routing settings, instead using its configured default gateway. Therefore, it is important that the IP address, VLAN, and default gateway entered for the management/LAN IP still provide connectivity to the Internet.  The management interface cannot have a gateway of it's own L3 interfaces." ... View more

Which VLAN on your switches connects towards your firewall? ... View more

What device is acting as the default gateway for vlan2?  A firewall?   The management IP for a switch can not have the default gateway that is also on the switch itself.  It must point to the next hop upstream - like a firewall. ... View more

When the notebook is connect to vlan2 it can also get a dhcp address and do name resolution fine? ... View more

If you apply a new management IP configuration and the switches fail to talk to the Meraki cloud the switches will try and revert back to what is was before you made the change.   I think this is why it is going back to vlan1.   If you patch a machine into vlan2 does it get access the Internet ok?  Is there any firewall that might be limiting access?   If you only have Meraki switches in your network you could also configure the network as a whole to use vlan2 for management.  You can fine this under: Switch/Switch Settings   ... View more

It is working again for me now. ... View more

I am also getting the issue. I am on shared n85. ... View more

Good news - you wont have any problems.   You can use the same VLAN numbering system as you do now.     One "gotcha" I will bring to you attention is that you use Meraki group policies (such as for content filtering by the type of user connectvting) effectively the clients need to be adjacent to the security appliances - which means the layer 3 gateways need to be on the MX units. Things will still work fine using layer 3 switches, but you just loose some of the extra cool controls that are available. ... View more

Assuming this switch is only doing layer 2 (no routing) it will not disrupt traffic flowing through the switch. ... View more

It might be visible under: Security Appliance/Security Centre/Events   ... View more

You know Meraki self a sponsor self registration system built in? https://documentation.meraki.com/MR/Encryption_and_Authentication/Sponsored_Guest   It is like ISE - but simple to setup.  You could have the entire thing and configured and running before you have finished download the currently ISE 13GB download.     ... View more

Well done @jozef for figuring out that solution! ... View more