I recently opened a case regarding the "null" response to the user creation. Looks like any uppercase letter in the email creates this behaviour. Sending the email variable as email.lower() resolves the issue. Note that in all cases (sending uppercase letters or not), the resulting created user's email is always lowercase in the dashboard. ... View more

No, this is not related to the ServiceNow plugin.  This question is specific to what abilities Meraki Support has to troubleshoot 401 errors. Any help would be appreciated  Thanks. ... View more

im still seeing loss reported on the statistics page.. ... View more

I think you are referring to "standard" security appliance clients.  If so, you apply the group policy "Allow".  This is based on the MAC address.   https://documentation.meraki.com/General_Administration/Cross-Platform_Content/Blocking_and_Allowing_Clients#Allow_List   ... View more

You are correct that I went to Network-wide > General. I will still bring this up with support as ignore becomes an invalid operation when scheduling the upgrade in this method.    Thank you for sharing the support article on cancelling, that does work from the firmware upgrades page. ... View more

I'm replacing Ubiquiti for Meraki ... View more

It's entreprise wireless internet connection so I think it's solid. I have many Windows devices with this activity log :  Do I need to authorize or register for notifications ? ... View more

Using the default route option in Auto VPN will send all traffic over to the hub if the source subnet/vlan is set to be included in VPN. This can be seen here: https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-Site_VPN_Settings#Default_Route. If the default route option is selected you can use vpn breakout which breaks out traffic from the default route auto vpn based on destination. *SD-WAN rules will not override this default route. So breaking out traffic from the default route based on source is not possible at this time, if that vlan is participating in VPN. You would first need to uncheck the default route option and then you can steer traffic based on source. ... View more

Independent of your topology failovers will happen in two scenario's. 1) Both WAN's are down in the primary (in this case the primary MX will send a VRRP message that excludes the primary firewall as active forwarder). 2) The spare unit no longer gets any VRRP messages from the primary.  ( if the active firewall is still there then you will have an active active scenario with instability as effect ). ... View more

This is not possible. There is only one global vpn firewall.  I dont know what your wan1/wan2 providers uptime is, but normally with 2 providers you should already have near zero downtime. ... View more

In the bottom right-hand corner of the dashboard is a button called "Give your feedback".  That is the best place to request new functionality. ... View more

Ok  Thank you  I thought this mysw but my friend got me confused  Thank you for providing the link, appreciated  ... View more

@MrHill, I get asked about this "update" feature myself. I've explained to my users that what the update actually does is checks with the App Store to verify if it is on the latest version of the app. If it is not, then it downloads the updated app. I think most people see the word update and just assume it means the app needs updated not that it's an option to check for an update which more appropriately describes the functionality.  ... View more

Hello,   You can tag Non Meraki VPN configurations so only certain MX's or vMX's get the tunnel configuration: https://documentation.meraki.com/MX/Site-to-site_VPN/Site-to-Site_VPN_Settings#Peer_Availability In terms of the other questions I'm not really following the design, it might be beneficial to get a network diagram drawn up and make a support case and share the diagram with them and what your hoping to accomplish. ... View more

The interface is set for DHCP. Should it receive a DHCP IP or does it need a static IP? ... View more

Thank you for the reply, I'll do that and keep you informd. ... View more

The SFP-H25G-CUxM are actual Cisco parts.  You can verify this on the tmgmatrix.cisco.com website. These are the handy cheap twinax cables to downlink close switches or servers 😉 These will have to be 'officially' supported soon since the whole C9300X is built around 25G connections. ... View more

No worries, I'd seen something similar on one of our sites, so thought it worth a try! ... View more

I'd suggest first figuring out what the devices public IP is when it hits the internet, whatmyips.com etc can help with that. Once you have that IP I would take a packet capture on the WAN interface of the MX and see if the traffic is actually reaching the MX. Here is the anyconnect troubleshooting guide: https://documentation.meraki.com/MX/Client_VPN/AnyConnect_on_the_MX_Appliance/AnyConnect_Troubleshooting_Guide Here is the l2tp troubleshooting guide: https://documentation.meraki.com/MX/Client_VPN/Guided_Client_VPN_Troubleshooting Packet capture for client vpn guide: https://documentation.meraki.com/MX/Client_VPN/Guided_Client_VPN_Troubleshooting/Troubleshooting_Client_VPN_with_Packet_Captures ... View more

Theres really not much information here to be helpful other than providing the onboarding documentation and try going through onboarding again https://documentation.meraki.com/Cloud_Monitoring_for_Catalyst/Onboarding/Cloud_Monitoring_for_Catalyst_Onboarding_Guide ... View more

Just wanting to include in this conversation that our team is having issues changing the PSK for a few different networks currently using the new version of the Meraki Dashboard. The old version of the dashboard is still working fine. Not sure if this may be a related issue, but definitely seems like something on the backend changing/breaking.  Edit: Want to add that this also started occurring today. We've been doing it for the past >year without issues. ... View more

Hello, Under Security&SD-WAN>Content Filtering you can type in the name of a URL and see what category it would fall under and configure that category as blocked. This does require an advanced security license. Otherwise you would have to manually enter FQDN's into your layer 3 rules. ... View more

If I get this right, you want a solution to allow the client to authenticate using their email address, when their device can't ask to authenticate? ... View more

It normally only shows this if you browse to it from inside of the MX, unless you have enabled "Layer 3 Inbound Rules" and not created a rule to block it. ... View more

Sorry to be the bearer of bad news, but this is not possible. Whilst Managed app config would get you part of the way (provisioning the user with managed app config), the user would still need to authenticate, and, if you're using O365, then you're likely to be using modern authentication through a web interface, of which managed app config can't and doesn't support   To be clear: this is not a limitation of SM, nor iOS: It's an implementation issue with O365 and Modern Auth ... View more