SAML support is available, but you need to call Meraki support to have them enable it for the client VPN. That allows you to Auth straight to Duo, Okta, AzureAD, etc, without the RADIUS server.   https://documentation.meraki.com/MX/Client_VPN/AnyConnect_on_the_MX_Appliance/Authentication   I'm still not sure of what kind of policy control you'd be able to apply, though. ... View more

Has anyone figured this out, We are getting an increase of this on our network. ... View more

I used to work for Ixia/Keysight which is a test equipment manufacture and the link bouncing up and down is probably due to an unsupported transceiver which can be proprietary. The cause of this is that the layer 1 negotiations aren't able to take place correctly. I do see in this thread where a Cisco SFP model was listed as working. ... View more

Good afternoon, could you help me with something, I need to activate the people count in a meraki MV32 camera, but when doing so I do not see the option in which it is active ... View more

Correct, use to do this before MX15 firmware and above. They appear to have removed a basic SD-WAN feature as there obviously wasn't a device/hardware limitation.  ... View more

We have same issue with MG21. By all appearances, anywhere between 21-25 days goes dark. Needs rebooted to come back. Looking for way to connect to switchport, so need to drive into offices to reboot. On the MX port 1 is internet and port 2 is cellular (non POE). Nightmare reaching out to people at 6 different sites to go in and reboot. Opened case with Meraki, not helpful at all. ... View more

@Ahoste We have the same issue. We have 2FA turned on which means that iPhone users can't login from their mobile devices since anytime they navigate away from the splash page it closes.  ... View more

> I wonder if the ISP would want or be able to do something about that when I provide them with some of these details.   You should do that.  It will cost them money (bigger link) to resolve.  So they probably won't do anything till enough customers complain. ... View more

You would need a RADIUS server (or service) that supports Google push notifications.  Possibly you could use something that let the user enter their password and a code. I'm not aware of any that do either of these.   Cisco Duo is popular for this solution, but you need a backend Active Directory or RADIUS. ... View more

@Ahoste checking your public IP only shows what you are going out of the firewall as, not what you are connecting to from the VPN.  If you look at the client traffic you should see which IP it is connecting to for the VPN ... View more

@UCcert hopefully as I had already set 15.36 as the firmware before even powering it up we should be okay...  We'd only ever intend on using it for 1 user with a phone and a couple of devices though I'd have hoped it would cope with more! ... View more

Hi,   I believe the clients will be authorized only for the duration configured. In this case, after 30 mins the clients will have to re-authenticate unless the group policy is still applied.  ... View more

The call to get the list of organisations is failing.  It's a pretty basic call that one.  It doesn't even have any parameters.   Are you sure the account being used is a Meraki organisation admin? Are you sure API access is enable to the organisation? ... View more