Thanks for the responses guys, whilst there is no solution just yet to what I am trying to achieve programmatically, I am sure in time Meraki will add an endpoint for this. To this effect I have provided feedback in order to hopefully bring this to their attention.   Thanks. ... View more

Yes support is helping with the case. Also had to pull some strings with our Cisco rep for escalation. ... View more

Hey @SopheakMang, I encountered the same issues when using templates today as well. I was using the 10.1.0.0/16 subnetteed out per site. I had been using 10.255.0.0/16 elsewhere. So it wasn't my first template like you described. However I think regardless the issue can be fixed by what I am about to explain.   The first step is to raise this with Meraki support. You will need to request them to enable the Loose Subnets feature. What this does is prevent the Meraki logic from checking whether you are using a subnet in the same supernet as 10.0.0.0/8. Of course, you still want some sanity checking by Meraki so ask them to enable the second feature which will verify if there is overlapping subnets within the 10/8 network. After these two features were enabled this, fixed my problem and I was able to assign my template with no issues. ... View more

>I was told that the Meraki client VPN hasn't seen an update in years    There is no "Meraki VPN Client".  There is only the Microsoft VPN client, which is built into Windows.   If you have local AD controllers on-site you should be able to use those.  NetBIOS is not required in this case.  One issue I have seen in the past is the zones by default only allowing secure updates, and sometimes when machines attach to the network they attempt to update their names prior to machine authentication, causing the update to fail. Sometimes I just disable secure updates on the DNS zones in AD to resolve this.  The issue they create with not being able to update is more severe then the security posture lost. ... View more

I'm going to assume you use AutoVPN over some kind of MPLS style WAN.   Something I have done many times before is at some central location with layer 3 capability (such as a DC or perhaps an HQ) you put the MPLS edge router and the MX hub next to each other.  They each have routes to each others networks loaded pointing via the other device (often via a core L3 switch).   I've typically done this when migrating from MPLS to Meraki.  But you could have it permanently deployed as well. ... View more