https://documentation.meraki.com/General_Administration/Support/Information_for_Cisco_Meraki_for_Government_users ... View more

Search for semaphore. https://github.com/meraki/dashboard-api-python/blob/main/meraki/aio/rest_session.py ... View more

How did I find it?   Something I would have been doing would have been broken.  I go look at the source code for the Meraki SDK to understand how it works.  I then consult Google.  I then try 90 different approaches and fail.  I then get it working and spend the next 10 iterations tidying it up and working nicely.   That's how I found it. ... View more

I'm going to start a new reply.  The asyncio uses a ratelimiter by default.  They way this works is it submits all 10 API calls immediately, and then as one request finishes it dispatches another.   When I have high levels of concurrency I have had more luck using a Throttler.  If you have 10 API requests pending, it spaces them out in 100ms intervals.  I use code like:   import asyncio,meraki.aio,throttler ... async with meraki.aio.AsyncDashboardAPI( output_log=False, print_console=False, maximum_retries=100, wait_on_rate_limit=True ) as dashboard: dashboard._session._concurrent_requests_semaphore = throttler.Throttler(rate_limit=4, period=1.0) ... ... View more

That is not how it works.  The Meraki asyncio internally uses a rate limiter of 10.  It will submit no more than 10 API calls at a time. ... View more

No. https://documentation.meraki.com/MT/MT_General_Articles/MT_Frequently_Asked_Questions#Sampling_rate_and_frequency_of_connections   ... View more

>Switch is in rapid-pvst mode   It needs to be in MST mode.  Use this: spanning-tree mode mst   All your Cisco switches should be set to use MST (in case you have others). ... View more

This. ... View more

I don't know.  This sounds related.  It sounds like it would only work if using iBGP.   https://documentation.meraki.com/MX/Networks_and_Routing/Border_Gateway_Protocol_(BGP)#Route_Advertisement_Behavior   "A VPN concentrator will advertise local networks which are not directly connected and are configured on the site-to-site VPN settings page via iBGP, but not via eBGP to external peers." ... View more

You could also upload a custom floor plan which is an image of a heart. https://documentation.meraki.com/General_Administration/Monitoring_and_Reporting/Using_a_Floor_Plan_or_Custom_Map_in_Dashboard ... View more

If you jump onto the console of the Linux server and do a tcpdump - do you see the packets hitting the network interface of the server? ... View more

The second page is the correct one. ... View more

Another memory just came back to me.   Subscription licencing is applied network by network. I did a company recently that was managed as a single organization, but each site was financially separate from the others. I sold each site their own seperate subscription for their own network.  They can even have different length subscriptions. ... View more

It should be cost-neutral (or only be a little bit more expensive), but the pricing is sometimes messed up. It is safer to get a quote for both and then have the subscription quote fixed to match the co-term quote.   I use subscription licencing a lot (almost exclusively) with larger customers. The first problem is with kit going EOS. Lets say you want to buy a 5 year licence to get the maximum savings.  But you have switches (or MXs or ...) going EOS in 3 years. With subscription licencing you can replace that kit whenever you like (such as in three years time).  You don't have to replace it at the same time as you buy your licences. This also helps spread out the spend.  Rather than one giant lump, you can spread it out as devices go EOS over the 5 year term.   The second problem is the time to roll out new kit.  Lets say you are using co-term licencing, and at the same time you are replacing 200 devices spread out geographically.  Once you apply your new co-term licence you have 30 days to complete the hardware swap out.  After that you have a painfull licence grace extension to process every 3 weeks or so until you complete the process.   With subscription licence you can take as long as you want to replace the kit. ... View more

I thought I remembered seeing a post about this recently on this community, but I can't find it now.   I did find this. https://community.meraki.com/t5/Developers-APIs/Now-in-beta-the-official-Terraform-provider-for-Meraki/m-p/230663     ... View more

I see that 18.211.5.1 mentions several Z3C fixes.  Nothing that covers what you describe.  But out of desperation, I would give it a try. ... View more

Can you mount it to the bottom of the cable race?   Have you already got the MV33?  Could you consider something like the MV13?  The MV13 would be much easier to put into a corner. ... View more

No to CML. ... View more

17.1.3 has been good for me.  I am just about to try out 17.1.4. ... View more

The MX config is correct.   Try a packet capture to see if you can see your SSH traffic hitting the MX. https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Packet_Capture_Overview   Has the device you are SSHing into got a host firewall running?  Any chance the host firewall is filtering out remote connections?   Does the host itself have its default gateway pointing to the MX?  Can it ping something like 8.8.8.8 ok? ... View more

Interesting question.   For small to medium sized companies I rely on content filtering and IPS, and don't have an explicit deny.  I'll often have no firewall rules.   For medium to large companies I have explicit rules for everything and add a default deny. ... View more

What does Wireless Health report?     Also check out this general health troubleshooting guide. https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Meraki_Health_Overview ... View more

What does Security & SD-WAN/VPN Status for the "test" appliance say?   ... View more

I would consider upgrading the IoT sensors to resolve the problem they are causing ... ... View more