The dual master state occurs when the firewalls are unable to communicate effectively with each other via VRRP. This communication is done on the LAN side of the firewalls. Based on the recommended topologies and best practices provided in Meraki documentation compared to your diagram, you may be running into issues with STP convergence and getting some blocked ports.   https://documentation.meraki.com/MX/Deployment_Guides/MX_Warm_Spare_-_High_Availability_Pair#Requirements_and_Best_Practices ... View more

I'd agree with @NolanHerring. I'd start with inspecting the firewall rules applied to the MX450; especially if there was a subnet change. The transferred rules may be applying to the incorrect subnet.   ... View more

Hi Viksep,   While 2 factor authentication is possible with the Meraki Client VPN, it is not directly supported. As mentioned in our documentation,   "Client VPN does not natively support two-factor auth, a third-party solution is required for this configuration. As such, please refer to your two-factor auth solution's documentation for additional information and troubleshooting." - https://documentation.meraki.com/zGeneral_Administration/Other_Topics/Two-Factor_Authentication#Using_Two-Factor_Auth_with_Client_VPN   I will say however that Duo will not be compatible with Meraki Cloud Authentication. That option simply verifies the username and password stored in dashboard matches what is provided by the end user device. You will need to change the authentication type to RADIUS and add a radius server IP that points to the DAP. That should get you on the right track.   If you need any additional assistance with troubleshooting, feel free to contact Meraki Support!     ... View more

Hi TDS,   Much like @PhilipDAth I recommend verifying if AVG is blocking the communication from the SM App. Disabling AVG would be a quick way of doing that. If it can be isolated to AVG blocking the traffic, you would need to follow up with AVG and see what recommendations they provide to allow communication. One common block is the firewall functionality of some antivirus solutions. If the communication is blocked due to firewall rules, you can check on your Meraki dashboard under Help -> Firewall Info for a list of needed IP subnets and ports used for System Manager communication.   If further assistance is required to narrow down the reason for failure, feel free to open a case with Meraki Support and they can have a look as well. ... View more

@trendkill That is certainly odd behavior. From the firmware change/ fix list I do not see anything that would directly relate to VLAN changes.   If you would like further details, I would recommend opening a case with Meraki Support and they may be able to shed some light on any changes that may have occurred during the upgrade process. Beyond that review, an explanation of root cause would be very difficult to provide without the ability to reproduce the behavior.   Regards,   Byron Claiborne Cisco Meraki   ... View more